CVE-2017-6526

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi POST requests).

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-03-09

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Dnalims (Dnatools)

References

• http://www.securityfocus.com/bid/96823
• https://www.exploit-db.com/exploits/41578/
• https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/