Unscored CVE-2016-6534 EUVD-2016-7455GHSA-933m-qxvc-7xc2

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.…

Published Apr 10, 2017 · Updated Aug 6, 2024 · Assigned by certcc

Description

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations.

Affected products

Vendor	Product	Affected	Fixed
—	Opmantek NMIS before 8.5.12G	Opmantek NMIS before 8.5.12G	—

References

https://community.rapid7.com/community/infosec/blog/2016/09/07/multiple-disclosures-for-multiple-network-management-systems-part-2