Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Iteris Vantage Velocity Field Unit 操作系统命令注入漏洞
Vulnerability Description
Iteris Vantage Velocity Field Unit是美国Iteris公司的一款道路监测现场设备。 Iteris Vantage Velocity Field Unit 2.3.1版本、2.4.2版本和3.0版本中存在操作系统命令注入漏洞。攻击者借助带有shell元字符的NTP Server字段利用该漏洞执行命令。
CVSS Information
N/A
Vulnerability Type
N/A