CVE-2017-6048

Description

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.

Weakness classification

• CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

Primary references

• ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource