nfsen records
4 published records for vendor nfsen.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-273 Improper Check for Dropped Privileges1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2017-6972Proof of concept | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl coalienvault · ossim · CWE-273 | Critical9.8 | — | 14.6% | Mar 22, 2017 |
41Plan | CVE-2017-7175Proof of concept | NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Cunfsen · nfsen · CWE-78 | Critical9.9 | — | 6.5% | Jul 10, 2017 |
40Plan | CVE-2017-6971Proof of concept | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged alienvault · ossim · CWE-74 | High8.8 | — | 16.1% | Mar 22, 2017 |
34Monitor | CVE-2017-6970Proof of concept | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an alienvault · ossim · CWE-78 | High8.4 | — | 1.6% | Mar 22, 2017 |
- CVE-2017-697243Plan
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl co
CriticalCVSS 9.8Proof of conceptEPSS 14%alienvault · ossimMar 22, 2017
- CVE-2017-717541Plan
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Cu
CriticalCVSS 9.9Proof of conceptEPSS 6%nfsen · nfsenJul 10, 2017
- CVE-2017-697140Plan
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged
HighCVSS 8.8Proof of conceptEPSS 16%alienvault · ossimMar 22, 2017
- CVE-2017-697034Monitor
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an
HighCVSS 8.4Proof of conceptEPSS 1%alienvault · ossimMar 22, 2017