Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval() call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands via api/saveconfig.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
E2open设备OpenWebif插件安全漏洞
Vulnerability Description
OpenWebif plugin for E2 open devices是美国E2open公司的一个应用在E2open设备中的Web接口插件。 E2open设备中的OpenWebif插件1.2.4之前的版本中存在安全漏洞，该漏洞源于‘plugin/controllers/models/config.py’中的‘saveConfig’函数对‘key’HTTP GET参数中的内容执行eval()调用。远程攻击者可借助api/saveconfig利用该漏洞执行任意的Python代码或操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A