Approved changes feed: RSS · Atom
cpe:2.3:a:metis_cyberspace_technology_sa:metis_wic:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Metis Cyberspace Technology Sa (b517e22e-c760-59aa-b7c8-942eba1723b4) |
|---|---|
| Product | Metis Wic (85028631-1827-55b1-9105-3125555aa9fb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2250 |
vulnerable | 2026-06-08 07:55:16.782647 |
Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC
HIGH (7.5)
The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is configured with debug mode enabled, causing malformed requests to return verbose Django tracebacks that disclose backend source code, local file paths, and system configuration.
Published: 2026-02-11T14:13:45.892Z
Updated: 2026-02-12T15:20:51.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2248 |
vulnerable | 2026-06-08 07:55:16.781186 |
Unauthenticated Remote Root Shell Access via Web Console in METIS WIC
CRITICAL (9.8)
METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with root (UID 0) privileges. This results in full system compromise, allowing unauthorized access to modify system configuration, read sensitive data, or disrupt device operations
Published: 2026-02-11T14:15:42.961Z
Updated: 2026-02-12T15:20:05.979Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.