PT-2021-17456 · Mesa · Mesa Labs Amegaview

Stephen Yackey · Published 2021-12-21 · Updated 2022-01-04 · CVE-2021-27449

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior

Description The issue allows for command injection, which can be exploited to execute commands in the web server.

Recommendations For Mesa Labs AmegaView versions 3.0 and prior, update to a version later than 3.0 to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2021-27449

Affected Products

Mesa Labs Amegaview

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-27449 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27449 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03 · Note