PUBLISHED
2026-02-25 16:23
MODIFIED
2026-02-25 16:23
EPSS (Prob. Exploit)
0.66%
Top 49.2%
> DESCRIPTION
Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user.
This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-78: Improper Neutralization of Special Elements used in an OS Command - The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
> HISTORIQUE DES MODIFICATIONS
Première apparition
25/02/2026 16:23
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') - The product constructs all or part of an OS command using externally-influenced input from an upstr...
Nouvelle valeur:
CWE-78: Improper Neutralization of Special Elements used in an OS Command - The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it doe...
📊
ENRICHISSEMENT
01/03/2026 06:46
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') - The product constructs all or part of an OS command using externally-influenced input from an upstr...
Total des modifications: 2
Dernière mise à jour: 1 week ago