CVE-2023-24135

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
jensenofscandinaviaeagle_1200ac_firmware
15.03.06.33_en:_en
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://eagle.com
http://jensen.com
https://oxnan.com/img/Pasted%20image%2020230112110814.png
https://oxnan.com/posts/WriteFacMac-Command-Injection
http://eagle.com
http://jensen.com
https://oxnan.com/img/Pasted%20image%2020230112110814.png
https://oxnan.com/posts/WriteFacMac-Command-Injection