Code injection

2009-05-2814:30:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.115 Low

EPSS

Percentile

95.3%

JSON

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.

CPENameOperatorVersion
network_shutdown_moduleeq3.0
network_shutdown_moduleeq<= 3.1-beta
network_shutdown_moduleeq3.04
network_shutdown_moduleeq3.02
network_shutdown_moduleeq2.6

Name	Operator	Version
network_shutdown_module	eq	3.0
network_shutdown_module	eq	<= 3.1-beta
network_shutdown_module	eq	3.04
network_shutdown_module	eq	3.02
network_shutdown_module	eq	2.6