Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
INIM Electronics SmartLiving SmartLAN/G/SI <=6.x Remote Command Execution
Vulnerability Description
SmartLiving SmartLAN <=6.x contains an authenticated remote command injection vulnerability in the web.cgi binary through the 'par' POST parameter with the 'testemail' module. Attackers can exploit the unsanitized parameter and system() function call to execute arbitrary system commands with root privileges using default credentials.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Inim SmartLiving SmartLAN 操作系统命令注入漏洞
Vulnerability Description
Inim SmartLiving SmartLAN是意大利Inim公司的一系列网络通信扩展模块。 Inim SmartLiving SmartLAN 6.x及之前版本存在操作系统命令注入漏洞，该漏洞源于未清理par参数，可能导致远程命令注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A