Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 18.9%.
Path Traversal
Schneider Electric
Modicon M340 Bmxp342020 Firmware
Modicon M340 Bmxp342030 Firmware
Stbnic2212 Firmware
+40
NVD
CVSS 2.0
10.0
EPSS
18.9%
The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.
Command Injection
IBM
Security Access Manager For Mobile 8 0 Firmware
Security Access Manager For Web 7 0 Firmware
Security Access Manager For Web 8 0 Firmware
+2
NVD
CVSS 2.0
10.0
EPSS
6.5%