CVE-2016-10312

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.
References
Link Resource
https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf Exploit Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:jensenofscandinavia:al3g_firmware:2.23m:*:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:al3g:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:jensenofscandinavia:al5000ac_firmware:1.13:*:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:al5000ac:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:jensenofscandinavia:al59300_firmware:1.04:*:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:al59300:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-04-03 05:59

Updated : 2023-12-10 12:01


NVD link : CVE-2016-10312

Mitre link : CVE-2016-10312

CVE.ORG link : CVE-2016-10312


JSON object : View

Products Affected

jensenofscandinavia

  • al3g_firmware
  • al59300_firmware
  • al5000ac
  • al59300
  • al5000ac_firmware
  • al3g
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')