Improper access control

2016-05-1416:59:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

JSON

Meteocontrol WEB’log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an “access command shell-like feature.”

References

seclists.org/fulldisclosure/2016/May/52

ics-cert.us-cert.gov/advisories/ICSA-16-133-01