CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: huawei imanager neteco with software v600r008c00 and v600r008c10 has a command injection vulnerability. an authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. successful exploit could enable a low privileged user to execute commands that a high privileged user could execute, causing the files to be tampered with or deleted.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-11-22
Last Modified Date: 2017-12-07