CVE-2016-2297

Critical

Published: 14/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an 'access command shell-like feature.'

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the software to the latest version and implement appropriate security measures to minimize risk.

Original NVD description (English source)

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."