Description
An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MB connect line mbCONNECT24
Default version status: unaffected
1.0.0 to ≤ 2.20.0affected
MB connect line mymbCONNECT24
Default version status: unaffected
1.0.0 to ≤ 2.20.0affected
MB connect line mbCONNECT24
Default version status: unaffected
2.20.0affected
MB connect line mymbCONNECT24
Default version status: unaffected
2.20.0affected
Helmholz myREX24V2
Default version status: unaffected
1.0.0 to ≤ 2.20.0affected
Helmholz myREX24V2.virtual
Default version status: unaffected
1.0.0 to ≤ 2.20.0affected
Helmholz myREX24V2
Default version status: unaffected
2.20.0affected
Helmholz myREX24V2.virtual
Default version status: unaffected
2.20.0affected