Description (CNA)
The N-Reporter, N-Cloud, and N-Probe developed by N-Partner has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| N-Partner / N-Reporter | affected 6 before 6.1.187; affected 7 before 7.0.009 |
| N-Partner / N-Cloud | affected 6 before 6.1.187; affected 7 before 7.0.009 |
| N-Partner / N-Probe | affected 6 before 6.1.187; affected 7 before 7.0.009 |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-10386-231ae-1.html
- https://www.twcert.org.tw/en/cp-139-10387-b8a4e-2.html
ADP enrichment
No English description supplied.
No references supplied.