CVE-2019-25289highCWE-78

CVE-2019-25289: high-severity vulnerability in INIM Electronics s.r.l. SmartLiving…

INIM Electronics SmartLiving SmartLAN/G/SI <=6.x Remote Command Execution

Published · Updated

Follow this CVE+ Monitor Smartliving SmartLAN/G/SI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 1.9%
SmartLiving SmartLAN <=6.x contains an authenticated remote command injection vulnerability in the web.cgi binary through the 'par' POST parameter with the 'testemail' module. Attackers can exploit the unsanitized parameter and system() function call to execute arbitrary system commands with root privileges using default credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
INIM Electronics s.r.l. · SmartLiving SmartLAN/G/SI