VULNERABILITY INTELLIGENCE

CVE-2012-0261

CVSS score10 HIGH
EPSS probability73.95%
CISA KEVNot currently listed
Published2013-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references