YN115CPN8RPIO vulnerabilities
19 known vulnerabilities in YN115CPN8RPIO from Carlo Gavazzi Automation. 19 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot.
- 7.2 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.
- 7.2 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.
- 7.2 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device.
- 7.2 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.
- 7.2 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing execution of commands with root privileges on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator credentials allowing execution of commands with root privileges on the device.
- 7.5 High severity
ICE2-8IOL1-G65L-V1D: Path Traversal: '.../...//'
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Control of Filename for Include/Require Statement in PHP Program
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Control of Filename for Include/Require Statement in PHP Program
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials allowing execution of commands with root privileges on the device.
- 8.1 High severity
ICE2-8IOL1-G65L-V1D: Incorrect Authorization
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of commands with root privileges on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials allowing execution of commands with root privileges on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credentials allowing execution of commands with root privileges on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing execution of commands with root privileges on the device.
- 8.8 High severity
ICE2-8IOL1-G65L-V1D: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator credentials allowing execution of commands with root privileges on the device.
- 9.8 Critical severity
ICE2-8IOL1-G65L-V1D: Authentication Bypass Using an Alternate Path or Channel
An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured.