VULNERABILITY INTELLIGENCE

CVE-2012-5878

CVSS score9.8 CRITICAL

EPSS probability9.30%

CISA KEVNot currently listed

Published2020-01-03

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.

Weakness classification

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references

cve@mitre.org — Not Applicable, Third Party Advisory
cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory