Network Vision IntraVue Code Injection Vulnerability

OVERVIEW Researcher Jürgen Bilberger from Daimler TSS GmbH has identified a code injection vulnerability in Network Vision’s IntraVue software. Network Vision has produced a new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...

CVE-2015-0977

Summary: Network Vision IntraVue on Windows is affected before version 2.3.0a14. Root cause: OS command injection due to improper handling of input ( CWE-78 ). Impact: unauthenticated remote attacker can execute arbitrary OS commands on the affected server, compromising confidentiality, integrity...