Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Copeland XWEB and XWEB Pro OS Command Injection
Vulnerability Description
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by modifying malicious input injected into the MBird SMS service URL and/or code via the utility route which is later processed during system setup, leading to remote code execution.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Copeland XWEB PRO 操作系统命令注入漏洞
Vulnerability Description
Copeland XWEB PRO是美国Copeland公司的一款先进的商用与工业制冷监控管理系统。 Copeland XWEB PRO 1.12.1及之前版本存在操作系统命令注入漏洞，该漏洞源于MBird SMS服务URL和代码存在恶意输入，可能导致OS命令注入和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A