Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray
Vulnerability Description
Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resulting in full system compromise. This vulnerability can only be attacked if the attacker has some other way to write arbitrary data to the user table.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
MB Connect Line mbCONNECT24 操作系统命令注入漏洞
Vulnerability Description
MB Connect Line mbCONNECT24是德国MB Connect Line公司的一套远程服务门户网站。该产品支持远程接入、数据记录和报警等功能。 MB connect line mbCONNECT24存在操作系统命令注入漏洞，该漏洞源于操作系统命令特殊元素中和不当，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A