PT-2017-7731 · Talariax · Sendquick Entera+1

Published 2017-02-05 · Updated 2024-02-14 · CVE-2016-10098

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16

Description An issue was discovered that allows attackers to execute arbitrary system commands due to multiple Command Injection vulnerabilities.

Recommendations For SendQuick Entera versions prior to 2HF16, update to version 2HF16 or later. For Avera versions prior to 2HF16, update to version 2HF16 or later.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2016-10098

Affected Products

Avera

Sendquick Entera

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-10098 · Security Note
• http://securityfocus.com/bid/96129 · Note
• https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances · Note