CVE-2016-2297 - Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."

Back Back to CVE browser

CRITICAL

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."

Published May 14, 2016

9.4

CRITICAL

CVSS 3.0

EPSS 4.26%

Description

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://seclists.org/fulldisclosure/2016/May/52
mailing-listx_refsource_FULLDISC
https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://seclists.org/fulldisclosure/2016/May/52		mailing-listx_refsource_FULLDISC
https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published May 14, 2016

Updated Aug 5, 2024

Reserved Feb 9, 2016

Link CVE-2016-2297

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-2297

Red Hat

Severity n/a

Public date n/a

Links CVE-2016-2297