critical9.9Public exploit code
CVE-2017-7175
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format"…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection2017-07-11 · webapps · linux · Verified
Impact
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format" field).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nfsen | Nfsen | through 1.3.7 |