Meteocontrol: >> Web'log Light Security Vulnerabilities
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors.
CVSS Score
9.8
EPSS Score
0.73
Published
2016-05-14
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."
CVSS Score
9.4
EPSS Score
0.006
Published
2016-05-14
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVSS Score
9.4
EPSS Score
0.746
Published
2016-05-14