Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter.
References
| Link | Resource |
|---|---|
| http://eagle.com | Product |
| http://jensen.com | Not Applicable |
| https://oxnan.com/img/Pasted%20image%2020230112110814.png | Broken Link |
| https://oxnan.com/posts/WriteFacMac-Command-Injection | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
29 Jan 2024, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:jensenofscandinavia:eagle_1200ac_firmware:15.03.06.33_en:*:*:*:*:*:*:* cpe:2.3:h:jensenofscandinavia:eagle_1200ac:-:*:*:*:*:*:*:* |
|
| First Time |
Jensenofscandinavia
Jensenofscandinavia eagle 1200ac Jensenofscandinavia eagle 1200ac Firmware |
|
| CWE | CWE-77 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | () http://eagle.com - Product | |
| References | () https://oxnan.com/img/Pasted%20image%2020230112110814.png - Broken Link | |
| References | () http://jensen.com - Not Applicable | |
| References | () https://oxnan.com/posts/WriteFacMac-Command-Injection - Exploit, Third Party Advisory |
22 Jan 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-22 21:15
Updated : 2024-09-04 20:35
NVD link : CVE-2023-24135
Mitre link : CVE-2023-24135
JSON object : View
Products Affected
jensenofscandinavia
- eagle_1200ac_firmware
- eagle_1200ac
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')