Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 18.9%.
Path Traversal
Schneider Electric
Stbnic2212 Firmware
Stbnip2212 Firmware
Tsxetc0101 Firmware
+40
NVD
CVSS 2.0
10.0
EPSS
18.9%
The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.
IBM
Command Injection
Security Access Manager For Web 7 0 Firmware
Security Access Manager For Web Appliance
Security Access Manager For Web 8 0 Firmware
+2
NVD
CVSS 2.0
10.0
EPSS
6.5%