« Volver al listado

CVE-2017-6048

Estado: ModificadaAlta (8.8)—

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Satel-iberia — Sennet Multitask MeterSatel-iberia — Sennet Optimal DataloggerSatel-iberia — Sennet Solar Datalogger

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-6048",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Satel Iberia SenNet Data Logger and Electricity Meters",
          "versions": [
            {
              "status": "affected",
              "version": "Satel Iberia SenNet Data Logger and Electricity Meters"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-05-19T03:29:00.543",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02",
      "tags": [
        "Mitigation",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02",
      "tags": [
        "Mitigation",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system."
    },
    {
      "lang": "es",
      "value": "Se detectó un problema de inyección de comando en Concentradores de Medida y Medidores Eléctricos de Satel Iberia SenNet: SenNet Optimal DataLogger versiones V5.37c-1.43c y anteriores, SenNet Solar Datalogger versiones V5.03-1.56a y anteriores, y SenNet Multitask Meter versiones V5.21a-1.18b y anteriores. La explotación con éxito de esta vulnerabilidad podría resultar en que el atacante salga del shell enjaulado y alcance acceso completo al sistema."
    }
  ],
  "lastModified": "2026-06-17T01:21:42.023",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:satel-iberia:sennet_multitask_meter:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CDC29E1-279D-4B5F-BB14-9844C4F7735F",
              "versionEndIncluding": "5.21a-1.18b"
            },
            {
              "criteria": "cpe:2.3:a:satel-iberia:sennet_optimal_datalogger:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D80453AB-DFA7-4BD9-8A43-DAFAD72480F2",
              "versionEndIncluding": "5.37c-1.43c"
            },
            {
              "criteria": "cpe:2.3:a:satel-iberia:sennet_solar_datalogger:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C29D8235-23DA-4451-9EC2-FE0D04453AFC",
              "versionEndIncluding": "5.03-1.56a"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}