Inspur ClusterEngine 4.0 - Remote Code Execution

Inspur ClusterEngine V4.0 is suscptible to a remote code execution vulnerability. A remote attacker can send a malicious login packet to the control server. id: CVE-2020-21224 info: name: Inspur ClusterEngine 4.0 - Remote Code Execution author: pikpikcu severity: critical description: Inspur...

CVE-2021-27285

CVE-2021-27285 The Inspur ClusterEngine cluster management platform is a job management software specifically designed for Inspur TianSuo series HPC products. Inspur ClusterEngine has an improper SUID configuration issue, which allows non-administrative users to escalate privileges through certai...

Inspur Clusterengine V4 SYSshell - Remote Command Execution Detection

Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design. !/usr/bin/env python3 -- coding: utf-8 -- """Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design.""" import re from kittysploit import from lib.protocols.http.httpclient...

CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

CVE-2020-21224

A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...

CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

Inspur ClusterEngine security vulnerabilities

Inspur ClusterEngine is an application from China's Wave Inspur Inc. It provides management of jobs submitted by hardware and software in a cluster system. A security vulnerability exists in Inspur ClusterEngine v4.0 that originated from allowing an attacker to gain escalated local privileges and...

CVE-2021-27285: Incorrect Default Permissions

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

PT-2025-1354

Name of the Vulnerable Software and Affected Versions Inspur ClusterEngine version 4.0 Description An issue was discovered that allows attackers to gain escalated local privileges and execute arbitrary commands via the /opt/tsce4/torque6/bin/getJobsByShell endpoint. Recommendations For Inspur...

CVE-2021-27285

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell...

CVE-2021-27285

Inspur ClusterEngine v4.0 is vulnerable to local privilege escalation due to an improper SUID configuration in the component /opt/tsce4/torque6/bin/getJobsByShell . This flaw allows non-administrative users to execute arbitrary commands and obtain root privileges on the system. To remediate this ...

VulnCheck KEV: CVE-2020-21224

A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server...

Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-39845)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine, which can be exploited by an attacker to execute arbitrary commands...

Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30860)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...

Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30110)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine, which can be exploited by an attacker to gain server control privileges...

Unauthorized Access Vulnerability in Wave ClusterEngine

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. An unauthorized access vulnerability exists in Wave ClusterEngine, which can be exploited by attackers to obtain sensitive information...

Inspur ClusterEngine Remote Code Execution (CVE-2020-21224)

A remote code execution vulnerability exists in Inspur ClusterEngine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...