CVE-2016-2297 in WEB'log

Summary

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

02/09/2016

Disclosure

05/14/2016

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-269 (Confirmed)

CVSS

8.3

EPSS

0.01592

CTI

Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2297
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2297
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2297/