Command injection

2023-01-1710:15:00

PRIOn knowledge base

www.prio-n.com

command injection; pix-rt100; vulnerability; network-adjacent attacker; os command; execute command; version rt100_teq_2.1.1_eq101; version rt100_teq_2.1.2_eq101; product settings; arbitrary command; nvd

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command.

CPENameOperatorVersion
pix-rt100_firmwareeq2.1.1-eq101
pix-rt100_firmwareeq2.1.2-eq101

CPE	Name	Operator	Version
	pix-rt100_firmware	eq	2.1.1-eq101
	pix-rt100_firmware	eq	2.1.2-eq101

References

jvn.jp/en/jp/JVN57296685/index.html

www.pixela.co.jp/products/network/pix_rt100/update.html