Security Advisory

CVE-2017-14119

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-09-03 20:00:00
Last updated 2024-09-16 17:08:50
Assigner mitre
State PUBLISHED

Description

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, moduletool_alltoolssnmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter.