CVE-2016-10043

{"id": "CVE-2016-10043", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}]}, "published": "2017-01-31T18:59:00.437", "references": [{"url": "https://www.exploit-db.com/exploits/41179/", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character (|) to inject arbitrary OS commands and retrieve the output in the application's responses. Attackers could execute unauthorized commands, which could then be used to disable the software, or read, write, and modify data for which the attacker does not have permissions to access directly. Since the targeted application is directly executing the commands instead of the attacker, any malicious activities may appear to come from the application or the application's owner (apache user)."}, {"lang": "es", "value": "Se ha descubierto un problema en Radisys MRF Web Panel (SWMS) 9.0.1. Se ha descubierto que el par\u00e1metro MSM_MACRO_NAME POST en /swms/ms.cgi era vulnerable ataques de inyecci\u00f3n de comandos del SO. Esto es posible por usar el car\u00e1cter tuber\u00eda (|) para inyectar comandos de SO arbitrarios y recuperar la salida en las respuestas de la aplicaci\u00f3n. Los atacantes podr\u00edan ejecutar comandos no autorizados, lo que podr\u00eda utilizarse para deshabilitar el software, o leer, escribir y modificar datos para los que el atacante no tiene permisos para acceder directamente. Dado que la aplicaci\u00f3n de destino ejecuta directamente los comandos en lugar del atacante, cualquier actividad maliciosa puede parecer que provenga de la aplicaci\u00f3n o del propietario de la aplicaci\u00f3n (usuario de apache)."}], "lastModified": "2017-03-13T14:59:38.647", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mrf:web_panel:9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FF6C45E-432A-4C15-BDDF-4D115C191683"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}