OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.
Se presenta una vulnerabilidad de inyección de comandos del Sistema Operativo en CENTUM VP versiones R4.01.00 a R4.03.00, CENTUM VP Small versiones R4.01.00 a R4.03.00, CENTUM VP Basic versiones R4.01.00 a R4.03.00 y B/M9000 VP versiones R6.01.01 a R6.03.02, que puede permitir a un atacante que pueda acceder al ordenador donde está instalado el producto afectado ejecutar un comando arbitrario del Sistema Operativo al alterar un archivo generado con Graphic Builder
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:L/AC:M/Au:N/C:P/I:P/A:P
| Access Vector | LOCAL |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-78
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| yokogawa | b\/m9000_vp | * | <built-in method update of dict object at 0x7e60bacd5c00> | Application |
| yokogawa | centum_vp | * | <built-in method update of dict object at 0x7e60bae48e80> | Application |
| yokogawa | centum_vp | * | <built-in method update of dict object at 0x7e60eb2e1340> | Application |
| yokogawa | centum_vp | * | <built-in method update of dict object at 0x7e61109d6380> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:yokogawa:b\/m9000_vp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:-:*:*:* |
| Yes | cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:basic:*:*:* |
| Yes | cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:small:*:*:* |