Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-9757

IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated users, or through CSRF.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.779
EPSS Ranking 98.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
Products affected by CVE-2017-9757
  • Ipfire » Ipfire » Version: 1.49
    cpe:2.3:a:ipfire:ipfire:1.49
  • Ipfire » Ipfire » Version: 2.1
    cpe:2.3:a:ipfire:ipfire:2.1
  • Ipfire » Ipfire » Version: 2.11
    cpe:2.3:a:ipfire:ipfire:2.11
  • Ipfire » Ipfire » Version: 2.13
    cpe:2.3:a:ipfire:ipfire:2.13
  • Ipfire » Ipfire » Version: 2.15
    cpe:2.3:a:ipfire:ipfire:2.15
  • Ipfire » Ipfire » Version: 2.17
    cpe:2.3:a:ipfire:ipfire:2.17
  • Ipfire » Ipfire » Version: 2.19
    cpe:2.3:a:ipfire:ipfire:2.19


Products
Pricing
Contact Us

Shodan ® - All rights reserved