CVE-2020-10603CWE-78

WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely

published April 9, 2020

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01221 · 68.5th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2020-04-09T13:10Z
EPSS history
Timeline
  • 09 APR 13:10Z
    WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely
    cvelistv5