Description (CNA)
Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TURCK / TBEN-LL-SE-M2 | affected 0.0.0 through 2.0.6.0 |
| TURCK / TBEN-L4-SE-M2 | affected 0.0.0 through 2.0.6.0 |
| TURCK / TBEN-L5-SE-M2 | affected 0.0.0 through 2.0.6.0 |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.