Code injection

2022-03-0417:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3.

CPENameOperatorVersion
incapptic_connecteq1.40.0
incapptic_connecteq1.39.1
incapptic_connecteq1.39.0
incapptic_connecteq1.38.1
incapptic_connecteq1.38.0
incapptic_connecteq1.37.1
incapptic_connecteq1.37.0
incapptic_connecteq1.36.0
incapptic_connecteq1.35.5
incapptic_connecteq1.35.4

Name	Operator	Version
incapptic_connect	eq	1.40.0
incapptic_connect	eq	1.39.1
incapptic_connect	eq	1.39.0
incapptic_connect	eq	1.38.1
incapptic_connect	eq	1.38.0
incapptic_connect	eq	1.37.1
incapptic_connect	eq	1.37.0
incapptic_connect	eq	1.36.0
incapptic_connect	eq	1.35.5
incapptic_connect	eq	1.35.4