Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-281m-dkqs-rfbe |
|---|
| Summary | EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged remote shell access. |
|---|
| Aliases |
|
|---|
| Fixed_packages |
|
|---|
| Affected_packages |
|
|---|
| References |
|
|---|
| Weaknesses |
| 0 |
| cwe_id |
77 |
| name |
Improper Neutralization of Special Elements used in a Command ('Command Injection') |
| description |
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
|
|
|---|
| Exploits |
|
|---|
| Severity_range_score | null |
|---|
| Exploitability | null |
|---|
| Weighted_severity | null |
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-281m-dkqs-rfbe |
|---|