CVE-2018-12483

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability

published August 3, 2018

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. Authentication is needed in order to exploit this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03220 · 88.1th percentile
Published
2018-08-03T16:00Z
EPSS history
Timeline
  • 03 AUG 16:00Z
    OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability
    cvelistv5