EUVD-2026-77219
GHSA-h92c-2w46-3c4m
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible authenticated command injection with full CIA impact on the device; PR:L reflects required login credential, S:U because no scope change to other systems is indicated.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
4DescriptionCVE.org
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
AnalysisAI
OS command injection in Contec's SGA1000 device allows an authenticated network attacker to execute arbitrary commands on the underlying operating system. The flaw (CWE-78) arises from insufficient sanitization of user-supplied input before it is passed to system shell calls, affecting all known versions per the wildcard CPE specifier. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid low-privilege login account on the SGA1000 (PR:L per CVSS 4.0 vector) and have network connectivity to the device's management interface (AV:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 accurately reflects a high-severity flaw: network-accessible, low complexity, authenticated-only barrier, with full confidentiality, integrity, and availability impact on the vulnerable system. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch per the Contec security advisory (https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf); an exact fixed firmware or software version is not independently confirmed from the available reference data, so consult the advisory directly for the specific target version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of all Contec SGA1000 devices in your environment and restrict network access to administrative interfaces using firewall rules and network segmentation. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Path traversal in Contec SGA1000 allows a network attacker with FTP credentials to read and overwrite arbitrary files on
Cross-site request forgery affects a broad range of Contec industrial data loggers, flow computers, and remote I/O coupl
Cross-site scripting (XSS) in the Contec SGA1000 web management interface allows an adjacent-network attacker to inject
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today