CVE-2016-2297

2016-05-1416:00:00

icscert

www.cve.org

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%

JSON

Meteocontrol WEB’log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an “access command shell-like feature.”

References

seclists.org/fulldisclosure/2016/May/52

ics-cert.us-cert.gov/advisories/ICSA-16-133-01