Unscored CVE-2016-2297 EUVD-2016-3381GHSA-5fqv-vrx3-3h8m

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command …

Published May 14, 2016 · Updated Aug 5, 2024 · Assigned by icscert

Description

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."

Advisories 1

ICSA-16-133-01A Meteocontrol WEB'log Vulnerabilities (Update A) CISA ICS & IT advisories · Jun 5, 2025

References

20160517 [ICS] Meteocontrol WEB'log Multiple Vulnerabilities mailing-list
https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01