Approved changes feed: RSS · Atom

cpe:2.3:a:inteno:iopsys:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInteno (396488b6-6706-5bc6-b431-4ef95f56cf65)
ProductIopsys (9aff9fbe-967e-5151-91c6-df4ce9570b62)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20487 vulnerable 2026-06-08 05:11:27.430891 Details available
An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.
Published: 2019-04-11T20:21:05.000Z
Updated: 2024-08-05T12:05:17.236Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.