CVE-2011-4182

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.

Score

CVSS 3.0 8.1 High

Status

Modified - security@opentext.com

Published

2018-06-12

Last modified

2024-09-17

Weaknesses

CWE-20, CWE-77

Affected products

• Sysconfig (Opensuse)
• Sysconfig (Suse Linux Enterprise)

References

• https://bugzilla.suse.com/show_bug.cgi?id=735394
• https://www.suse.com/security/cve/CVE-2017-15710/