CVE-2017-6048
High
Description
A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSatel-iberia Sennet Multitask Meter
PublishedMay 19, 2017
First seenMay 19, 2017
Weakness typeCWE-77Command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| satel-iberia sennet_multitask_meter | v ≤ 5.21a-1.18b | — |
| satel-iberia sennet_optimal_datalogger | v ≤ 5.37c-1.43c | — |
| satel-iberia sennet_solar_datalogger | v ≤ 5.03-1.56a | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.