Lucene search
PRIOn knowledge basePRION:CVE-2023-27886HistoryMar 28, 2023 - 9:15 p.m.
Command injection
2023-03-2821:15:00
PRIOn knowledge base
www.prio-n.com
1
command injection
os vulnerability
unauthenticated access
http post parameter
shell commands
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osprey_pump_controller_firmware | eq | 1.01 |
Related
cvelist
cvelist
CVE-2023-27886 CVE-2023-27886
2023-03-28 20:04:07
cve
cve
CVE-2023-27886
2023-03-28 21:15:10
nvd
nvd
CVE-2023-27886
2023-03-28 21:15:10
zeroscience
zeroscience
Osprey Pump Controller 1.0.1 (pseudonym) Semi-blind Command Injection
2023-02-27 00:00:00
Osprey Pump Controller 1.0.1 (userName) Blind Command Injection
2023-02-27 00:00:00
ics
ics
ProPump and Controls Osprey Pump Controller (Update A)
2024-02-08 12:00:00