Command injection

2021-03-2609:15:00

PRIOn knowledge base

www.prio-n.com

4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.2%

JSON

UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.

CPENameOperatorVersion
sl2100_firmwarege1.00
sl2100_firmwarele3.00
univerge_aspire_ux_firmwarege1.00
univerge_aspire_ux_firmwarele9.70
univerge_aspire_wx_firmwarege1.00
univerge_aspire_wx_firmwarele3.51
univerge_sv9100_firmwarege1.00
univerge_sv9100_firmwarele10.70

Name	Operator	Version
sl2100_firmware	ge	1.00
sl2100_firmware	le	3.00
univerge_aspire_ux_firmware	ge	1.00
univerge_aspire_ux_firmware	le	9.70
univerge_aspire_wx_firmware	ge	1.00
univerge_aspire_wx_firmware	le	3.51
univerge_sv9100_firmware	ge	1.00
univerge_sv9100_firmware	le	10.70