OS Command Injection Vulnerability in NetGain Enterprise Manager
CVE-2018-10587

7.2HIGH

Key Information:

Vendor

Netgain-systems

Status
Enterprise Manager
Vendor
CVE Published:
1 November 2018

What is CVE-2018-10587?

NetGain Enterprise Manager is susceptible to OS Command Injection vulnerabilities which can be exploited by remote authenticated attackers. These vulnerabilities may enable attackers to inject arbitrary system commands, potentially leading to unauthorized remote code execution on affected systems. It's crucial for users of versions prior to 10.0.57 to update their software to mitigate this risk.

References

https://www.wizlynxgroup.com/security-research-advisories...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.