Command injection

2020-09-1009:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.3%

JSON

Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device’s web management interface allows attackers to inject specific code and execute system commands without privilege.

CPENameOperatorVersion
se5901_firmwarege1.18
se5901_firmwarele1.40
se5901b_firmwarege1.18
se5901b_firmwarele1.40
se5904d_firmwarege1.18
se5904d_firmwarele1.40
se5908_firmwarege1.18
se5908_firmwarele1.40
se5908a_firmwarege1.18
se5908a_firmwarele1.40

Name	Operator	Version
se5901_firmware	ge	1.18
se5901_firmware	le	1.40
se5901b_firmware	ge	1.18
se5901b_firmware	le	1.40
se5904d_firmware	ge	1.18
se5904d_firmware	le	1.40
se5908_firmware	ge	1.18
se5908_firmware	le	1.40
se5908a_firmware	ge	1.18
se5908a_firmware	le	1.40

Rows per page:

1-10 of 141

References

www.twcert.org.tw/tw/cp-132-3956-608f1-1.html