Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2023-6260

Web UI OS Command Injection in Brivo ACS100, ACS300

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Access): from 5.2.4 before 6.2.4.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brivo ACS100, ACS300

Default version status: unknown

  • 5.2.4 to < 6.2.4.3affected

References