← back
CVE-2012-0261

CVE-2012-0261

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 74%
from disclosure to weapon390 days
Published on NVDDec 31
1st PoC+390d
metasploitJan 5
exploitation probability
74%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/41686unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://bugs.op5.com/view.php?id=5094http://seclists.org/fulldisclosure/2012/Jan/62http://secunia.com/advisories/47417http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdfhttp://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/http://www.osvdb.org/78064