CVE-2016-2297

Critical

Published: 14/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an 'access command shell-like feature.'

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the software to the latest version and implement appropriate security measures to minimize risk.

Other vulnerabilities in Meteocontrol WEB'log Basic 100, Light, Pro, Pro Unlimited

See all

CVE-2016-2298Critical
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allow remote attackers to obtain sensitive cleartext information via unspecified vectors.
CVE-2016-2296Critical
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for 'post-admin' login pages, allowing remote attackers to obtain sensitive information or modify data via unspecified vectors.

Original NVD description (English source)

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."