Command injection

2017-05-1903:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.5%

JSON

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.

CPENameOperatorVersion
sennet_multitask_metereq<= 5.21a-1.18b
sennet_optimal_dataloggereq<= 5.37c-1.43c
sennet_solar_dataloggereq<= 5.3-1.56a

Name	Operator	Version
sennet_multitask_meter	eq	<= 5.21a-1.18b
sennet_optimal_datalogger	eq	<= 5.37c-1.43c
sennet_solar_datalogger	eq	<= 5.3-1.56a

References

ics-cert.us-cert.gov/advisories/ICSA-17-131-02