CVE Catalog

CVE-2016-10312

Critical
Published: Translated: NVD NIST

Summary

Devices Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.

Risk Assessment

Attackers can remotely take control of the devices, potentially leading to serious security breaches within the organization's network.

Recommendation

It is recommended to update the devices to the latest firmware versions to mitigate this vulnerability.

Original NVD description (English source)

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS