Vulnerability in Gwos Groundwork_monitor
CVE-2013-3509
html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the scan functionality in the System / NeDi menu.
EPSS: 0.019 (76.9th percentile) — read the EPSS interpretation.
Affected products
- Gwos Groundwork_monitor — versions 6.7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- VU#345260 (x_refsource_CERT-VN, US Government Resource, third-party-advisory)