CVE-2018-6021

HIGH

Silex SD-320AN < 2.01 and GEH-SD-320AN < GEH-1.1 - Remote Code Execution via System Call Parameter

Title source: llm
STIX 2.1

Description

Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior have a system call parameter that is not properly sanitized, which may allow remote code execution.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01

Scores

CVSS v3 7.4
EPSS 0.0135
EPSS Percentile 68.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Details

CWE
CWE-78
Status published
Products (2)
silextechnology/geh-sd-320an_firmware < geh-1.1
silextechnology/sd-320an_firmware < 2.01
Published May 09, 2018
Tracked Since Feb 18, 2026