Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA, and ASCON DY WebServer devices, allows remote authenticated users to execute arbitrary OS commands via crafted multipart/form-data content, a different vulnerability than CVE-2017-9097.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款产品Anti-Web 安全漏洞
Vulnerability Description
NetBiter/HMS等都是不同公司生产的的网关设备。Anti-Web是使用在其中的一个防病毒组件。 多款产品中的Anti-Web 3.8.7及之前的版本的cgi-bin/write.cgi文件存在安全漏洞。远程攻击者可借助特制的multipart/form-data内容利用该漏洞执行任意的操作系统命令。以下产品受到影响：NetBiter / HMS；Ouman EH-net；WS100 -->AWU 500；Sauter ERW100F001；Carlo Gavazzi SIU-DLG；AEDILIS
CVSS Information
N/A
Vulnerability Type
N/A