CVE-2017-6048

2017-05-1902:43:00

CWE-77

icscert

www.cve.org

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.5%

JSON

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.

CNA Affected

[
  {
    "product": "Satel Iberia SenNet Data Logger and Electricity Meters",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Satel Iberia SenNet Data Logger and Electricity Meters"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-17-131-02