CVE-2021-26616CWE-78

SecuwaySSL OS command injection vulnerability

High · published February 9, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

An OS command injection was found in SecuwaySSL, when special characters injection on execute command with runCommand arguments.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00884 · 58.8th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    SecuwaySSL OS command injection vulnerability
    cvelistv5