Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated OS Command Injection in Danfoss AK-EM100
Vulnerability Description
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Danfoss AK-EM100 web applications 命令注入漏洞
Vulnerability Description
Danfoss AK-EM100 web applications是丹麦Danfoss公司的一个 web 应用程序。提供了商店的基于 web 的图形用户界面，该界面允许一系列日常用户本地或远程监控关于他们所有制冷设备的数据、警报和报告。 Danfoss AK-EM100 web applications存在安全漏洞，该漏洞源于允许通过网络应用程序参数注入操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A