| 제목 | ICP DAS UA‑5200 Series UA‑5200 Series Command Injection |
|---|
| 설명 | 1. Vulnerability Type
Remote Command Execution Vulnerability
2. Vulnerability Description
The UA‑5200 Series is a lineup of industrial IoT (IIoT) communication servers/gateways manufactured by Taiwan-based ICP DAS. These devices are designed for data communication, protocol conversion and cloud integration between on-site industrial OT and IT systems. A remote command execution vulnerability exists in the ArmAngstromInstructionSet function of the UA-5200. Attackers can exploit this function to execute arbitrary system commands.
3. Affected Versions
UA-52200 series
https://uvxbywu62qm.feishu.cn/wiki/KwSzwcCstioZqKk7PODcIsDAn4W?from=from_copylink |
|---|
| 원천 | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/KwSzwcCstioZqKk7PODcIsDAn4W?from=from_copylink |
|---|
| 사용자 | huliangjia (UID 99519) |
|---|
| 제출 | 2026. 07. 04. PM 01:04 (3 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 01. AM 07:26 (2 months later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 397547 [ICP DAS UA-2200/UA-5200 까지 20260704 /CGI?RestApi=SetHostname ArmAngstromInstructionSet ParameterArray 권한 상승] |
|---|
| 포인트들 | 0 |
|---|