Input validation

2021-10-2701:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.

CPENameOperatorVersion
imanager_netecoeq600r10c0cp2001-v
imanager_netecoeq600r10c0cp2002-v
imanager_netecoeq600r10c0cp3001-v
imanager_netecoeq600r10c0cp3002-v
imanager_netecoeq600r10c0cp3101-v
imanager_netecoeq600r10c0cp3102-v
imanager_netecoeq600r10c0spc100-v
imanager_netecoeq600r10c0spc110-v
imanager_netecoeq600r10c0spc120-v
imanager_netecoeq600r10c0spc200-v

Name	Operator	Version
imanager_neteco	eq	600r10c0cp2001-v
imanager_neteco	eq	600r10c0cp2002-v
imanager_neteco	eq	600r10c0cp3001-v
imanager_neteco	eq	600r10c0cp3002-v
imanager_neteco	eq	600r10c0cp3101-v
imanager_neteco	eq	600r10c0cp3102-v
imanager_neteco	eq	600r10c0spc100-v
imanager_neteco	eq	600r10c0spc110-v
imanager_neteco	eq	600r10c0spc120-v
imanager_neteco	eq	600r10c0spc200-v