Command injection

2023-11-1706:15:00

PRIOn knowledge base

www.prio-n.com

command injection

vulnerability

clusterpro x

expresscluster x

arbitrary command

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

CPENameOperatorVersion
expresscluster_xeq3.3
expresscluster_xeq4.1
expresscluster_xeq4.2
expresscluster_xeq1.0
expresscluster_xeq2.0
expresscluster_xeq2.1
expresscluster_xeq3.0
expresscluster_xeq3.1
expresscluster_xeq3.2
expresscluster_xeq4.0

Name	Operator	Version
expresscluster_x	eq	3.3
expresscluster_x	eq	4.1
expresscluster_x	eq	4.2
expresscluster_x	eq	1.0
expresscluster_x	eq	2.0
expresscluster_x	eq	2.1
expresscluster_x	eq	3.0
expresscluster_x	eq	3.1
expresscluster_x	eq	3.2
expresscluster_x	eq	4.0

Rows per page:

1-10 of 481

References

jpn.nec.com/security-info/secinfo/nv23-009_en.html