Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2021/05/17 9:00 p.m.•78 views

OS Command Injection in wifiscanner

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS4.1AI score0.02533EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2020/06/29 5:15 p.m.•30 views

CVE-2020-15362

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS0.02533EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/06/29 5:15 p.m.•18 views

CVE-2020-15362

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS7.8AI score
SaveExploits0References1
Prion
Prion
•added 2020/06/29 5:15 p.m.•24 views

Code injection

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

7.5CVSS9.8AI score0.02533EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2020/06/29 4:12 p.m.•5 views

CVE-2020-15362

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS0.02533EPSS
SaveExploits1References2
CVE
CVE
•added 2020/06/29 4:12 p.m.•83 views

CVE-2020-15362

CVE-2020-15362 affects thingsSDK WiFi Scanner 1.0.1. The wifiscanner.js component allows Code Injection by accepting options that overwrite the default executable/binary path and its arguments, enabling arbitrary code execution. Root cause: insecure handling/override of executable path and argume...

9.8CVSS9.8AI score0.02533EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/29 12:00 a.m.•10 views

CVE-2020-15362: Improper Neutralization of Special Elements used in an OS Command

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS6.6AI score0.02533EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/06/29 12:00 a.m.•5 views

PT-2020-14390

Name of the Vulnerable Software and Affected Versions thingsSDK WiFi Scanner version 1.0.1 Description The issue allows code injection because the wifiscanner.js component can be used with options to overwrite the default executable/binary path and its arguments, enabling an attacker to execute...

9.8CVSS0.02533EPSS
SaveExploits1References4
Rows per page
Query Builder