Design/Logic Flaw

2021-09-2718:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

JSON

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a ‘nobody’ user which potentially leads to DoS.

CPENameOperatorVersion
sma_200_firmwareeq<= 9.0.0.10-28sv
sma_200_firmwarege10.2.0.0
sma_200_firmwarele10.2.0.7
sma_200_firmwarege10.2.1.0
sma_200_firmwarele10.2.1.0
sma_210_firmwareeq<= 9.0.0.10-28sv
sma_210_firmwarege10.2.0.0
sma_210_firmwarele10.2.0.7
sma_210_firmwarege10.2.1.0
sma_210_firmwarele10.2.1.0

Name	Operator	Version
sma_200_firmware	eq	<= 9.0.0.10-28sv
sma_200_firmware	ge	10.2.0.0
sma_200_firmware	le	10.2.0.7
sma_200_firmware	ge	10.2.1.0
sma_200_firmware	le	10.2.1.0
sma_210_firmware	eq	<= 9.0.0.10-28sv
sma_210_firmware	ge	10.2.0.0
sma_210_firmware	le	10.2.0.7
sma_210_firmware	ge	10.2.1.0
sma_210_firmware	le	10.2.1.0