high8.8
CVE-2023-43322
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discover…
Impact
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zpesystems | Nodegrid Os | from 5.0.0 before 5.0.18 from 5.2.0 before 5.2.20 from 5.4.0 before 5.4.17 from 5.6.0 before 5.6.14 from 5.8.0 before 5.8.11 from 5.10.0 before 5.10.4 |