CVE-2017-14119

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-09-03

Last modified

2024-09-16

Weaknesses

CWE-78

Affected products

• Eyesofnetwork (Eyesofnetwork)

References

• http://kk.whitecell-club.org/index.php/archives/220/