Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not sanitize the input parameters in specific GET requests that allow for code execution on operating system level. In combination with other vulnerabilities (CVE-2024-47902, CVE-2024-47903, CVE-2024-47904) this could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Siemens InterMesh 7177和Siemens InterMesh 7707 操作系统命令注入漏洞
Vulnerability Description
Siemens InterMesh 7177和Siemens InterMesh 7707都是美国西门子（Siemens）公司的一款远程 IP 链路接收器。 Siemens InterMesh 7177和Siemens InterMesh 7707存在操作系统命令注入漏洞，该漏洞源于Web服务器输入参数清理不当，从而允许在操作系统级别执行代码。
CVSS Information
N/A
Vulnerability Type
N/A