TropOS 4th Gen vulnerabilities
3 known vulnerabilities in TropOS 4th Gen from Hitachi Energy. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
TropOS 4th Gen: Improper Neutralization of Special Elements used in an OS Command
The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authenticated user with high privileges to inject commands into the command shell of the TropOS 4th Gen device. The injected comma
- 7.5 High severity
TropOS 4th Gen: Improper Privilege Management
By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands can enable access via secure shell (SSH) to an unrestricted root shell. This is possible through abuse of a particular s
- 8.7 High severity
TropOS 4th Gen: Improper Neutralization of Special Elements used in an OS Command
Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH a