CVE-2017-6048

Published: May 19, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.

Affected (3)

Products: Satel Iberia: Sennet Multitask Meter, Sennet Optimal Datalogger, Sennet Solar Datalogger

Satel Iberia

3 products

Sennet Multitask Meter

Sennet Optimal Datalogger

Sennet Solar Datalogger

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Satel Iberia Sennet Multitask Meter	Up to 5.21a-1.18b
Satel Iberia Sennet Optimal Datalogger	Up to 5.37c-1.43c
Satel Iberia Sennet Solar Datalogger	Up to 5.03-1.56a

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.