PT-2017-7731 · Talariax · Sendquick Entera+1

CVE-2016-10098 · Publicado 2017-02-05 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16

Description An issue was discovered that allows attackers to execute arbitrary system commands due to multiple Command Injection vulnerabilities.

Recommendations For SendQuick Entera versions prior to 2HF16, update to version 2HF16 or later. For Avera versions prior to 2HF16, update to version 2HF16 or later.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2016-10098

Produtos afetados

Avera

Sendquick Entera

Referências · 3

• http://securityfocus.com/bid/96129 · Nota
• https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10098 · Nota de Segurança