RSS   Podatności dla 'Ups companion'   RSS

2020-03-23
 
CVE-2020-6650

CWE-94
 

 
UPS companion software v1.05 & Prior is affected by �??Eval Injection�?? vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.�?�eval�?� in �??Update Manager�?� class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed.

 

 >>> Vendor: Eaton 18 Produkty
Network shutdown module
Proview
Elcsoft
Xcomfort ethernet communication interface
Eamaxx series epdu firmware
Emaxxx series epdu firmware
Eswaxx series epdu firmware
Emaaxx series epdu firmware
Eamxxx series epdu firmware
Intelligent power manager
9000x firmware
9px ups firmware
Halo home
Ups companion
Secureconnect
Easysoft
Intelligent power manager virtual appliance
Intelligent power protector


Copyright 2024, cxsecurity.com

 

Back to Top