Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
CVSS
7.8
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
60d ago · NVD
Added to TCL Advisory
52d ago · TCL Advisory
Added to CISA KEV
52d ago · CISA
Exploitation Status Changed
52d ago · TCL Advisory
NVD · Updated 52d ago
CISA KEV · Updated 60d ago