CVE-2021-40222

CVE-2021-40222 应用 : Rittal CMC PU III Web管理 设备 : CMC PU III 7030.000 软件版本 : V3.11.002 硬件版本 : V3.00 攻击类型 : 远程代码执行 解决方案 : 更新至软件版本V3.17.10或更高 摘要 : Web应用未能在网络TCP/IP配置页面中对用户输入进行清理。这使得攻击者能够以root身份在设备上注入命令，数据在接收几秒后即会被执行。攻击者可在设备中创建后门，或仅执行一个连接至攻击者机器的反向shell。成功利用此漏洞需要拥有设备管理的管理员权限（通过有效或劫持的会话）。 时间线 :...

EUVD-2021-27406

Malware in sbrugna...

EUVD-1999-1042

Malware in sbrugna...

Remote code execution

Rittal CMC PU III Web management Version affected: V3.11.002. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse shell in the PU-Hostname field of the TCP/IP Configuration dialog. Web application fails to sanitiz...

CVE-2021-40222

Rittal CMC PU III Web management Version affected: V3.11.002. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse shell in the PU-Hostname field of the TCP/IP Configuration dialog. Web application fails to sanitiz...

CVE-2021-40222

CVE-2021-40222 affects Rittal CMC PU III Web management. The vulnerability arises from failure to sanitize user input on the Network TCP/IP configuration page (PU-Hostname field), enabling remote command execution with root privileges via a crafted configuration payload. Affected version: V3.11.0...

Rittal CMC PU III 操作系统命令注入漏洞

Rittal CMC PU III is a monitoring system from Rittal, Germany. A security vulnerability exists in the Rittal CMC PU III Web management version V3.11.002, which originates from the inability of the web application to clean up user input on the network TCP/IP configuration page. The vulnerability c...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...