CVE-2019-16072: Enigma NMS < 65.0.0 - Authenticated OS Command Injection
Netsas · Enigma Network Management Solution
Affected: Netsas Enigma Network Management Solution · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 98% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- Enigma NMS < 65.0.0 - Authenticated OS Command Injection · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- Netsas
- Published
- March 2020
CoverageNo articles yet
No CyberSIXT article names CVE-2019-16072 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.