This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2017-14853 | BDVDB-2026-117262 Detail

Description#

The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact high, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.