CVE-2018-10587

NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2018-11-01

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Enterprise Manager (Netgain-systems)

References

• https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004