Command injection

2023-06-2614:15:00

PRIOn knowledge base

www.prio-n.com

openwb vulnerability

command injection

remote attack

get request

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.

CPENameOperatorVersion
openwbeq1.7
openwbeq1.6

CPE	Name	Operator	Version
	openwb	eq	1.7
	openwb	eq	1.6

References

eldstal.se/advisories/230329-openwb.html

github.com/snaptec/openWB/issues/2672

github.com/snaptec/openWB/pull/2673