CVE-2019-5987

HIGH

cgi_an-anlyzer < 2019-06-24 - Authenticated OS Command Injection via Management Page

Title source: llm
STIX 2.1

Description

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page.

References (2)

Core 2
Core References
Exploit, Vendor Advisory x_refsource_misc
https://www.anglers-net.com/anlog/update/index.html
Third Party Advisory x_refsource_misc
https://jvn.jp/en/jp/JVN37230341/index.html

Scores

CVSS v3 8.8
EPSS 0.0250
EPSS Percentile 82.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
anglers-net/cgi_an-anlyzer < 2019-06-24
Published Jan 06, 2020
Tracked Since Feb 18, 2026