← CVE Intelligence

CVE-2023-35850

SUNNET WMPro - Command Injection PUBLISHED

Description (CNA)

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.

Affected (CNA)

Vendor / productVersions
SUNNET / WMProaffected V5

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.