CVE-2008-6816

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:eaton:network_shutdown_module:*:*:*:*:*:*:*:*
cpe:2.3:h:eaton:network_shutdown_module:2.6:*:*:*:*:*:*:*
cpe:2.3:h:eaton:network_shutdown_module:3.0:*:*:*:*:*:*:*
cpe:2.3:h:eaton:network_shutdown_module:3.02:*:*:*:*:*:*:*
cpe:2.3:h:eaton:network_shutdown_module:3.04:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-05-28 14:30

Updated : 2023-12-10 10:51


NVD link : CVE-2008-6816

Mitre link : CVE-2008-6816

CVE.ORG link : CVE-2008-6816


JSON object : View

Products Affected

eaton

  • network_shutdown_module
CWE
CWE-287

Improper Authentication