Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Connected IO 操作系统命令注入漏洞
Vulnerability Description
Connected IO是美国Connected IO公司的一款领先的硬件、软件和基于云的物联网和机器对机器解决方案 Connected IO ER2000 v2.1.0及之前版本存在安全漏洞，该漏洞源于通信协议中的set firewall命令存在命令注入漏洞。攻击者可利用该漏洞在设备上执行任意操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A