Caton Live
Approved changes feed: RSS · Atom
cpe:2.3:a:catontechnology:caton_live:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Catontechnology (f0f0576a-58e8-57e2-8c12-2869991342f5) |
|---|---|
| Product | Caton Live (e33387f0-6ff8-5dc0-9a88-ae97a83b50ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2682 |
vulnerable | 2026-06-08 06:02:42.823198 |
Caton Live Mini_HTTPD ping.cgi command injection
MEDIUM (6.3)
A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228911. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-05-12T12:31:06.112Z
Updated: 2025-01-24T15:12:49.069Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.