CVE-2012-0262

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 72.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-12-31 · updated 2026-06-16
Weakness: CWE-94

Description

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.

Affected products

Op5 Monitor: through 5.5.1; 5.3.5, 5.4.0, 5.4.2, 5.5.0
Op5 System-Op5Config: through 2.0.2

References

http://seclists.org/fulldisclosure/2012/Jan/62
http://secunia.com/advisories/47417
http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/
http://www.osvdb.org/78065
https://bugs.op5.com/view.php?id=5094
http://seclists.org/fulldisclosure/2012/Jan/62
http://secunia.com/advisories/47417
http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/
http://www.osvdb.org/78065
https://bugs.op5.com/view.php?id=5094

Get alerted when CVE-2012-0262 or the next vulnerability affects your stack