CVE-2018-18879

In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly to the underlying operating system as…

published June 18, 2019

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly to the underlying operating system as user input is not sanitized in networkdiags.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02012 · 80.7th percentile
Published
2019-06-18T14:00Z
EPSS history
Timeline
  • 18 JUN 14:00Z
    In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly to the underlying operating system as…
    cvelistv5