Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/09 12:00 a.m.•7 views

CVE-2022-48580: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS7.8AI score0.01548EPSS
SaveExploits0References3
Rows per page
Query Builder