Web application abuses : Wedge Networks WedgeOS <= 4.0.4 Multiple Vulnerabilities

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.105311

Category: Web application abuses

Title: Wedge Networks WedgeOS <= 4.0.4 Multiple Vulnerabilities

Summary: Wedge Networks WedgeOS is prone to multiple vulnerabilities.

Description: Summary:
Wedge Networks WedgeOS is prone to multiple vulnerabilities.

Vulnerability Insight:
The product contains a number of security vulnerabilities,
including unauthenticated arbitrary file read as root, command injection in the web interface,
privilege escalation to root, and command execution via the system update functionality.

Affected Software/OS:
WedgeOS version 4.0.4 and prior.

Solution:
Update to a version later than 4.0.4.

CVSS Score:
8.5

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:P/A:N

Copyright Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.105311
Category:	Web application abuses
Title:	Wedge Networks WedgeOS <= 4.0.4 Multiple Vulnerabilities
Summary:	Wedge Networks WedgeOS is prone to multiple vulnerabilities.
Description:	Summary: Wedge Networks WedgeOS is prone to multiple vulnerabilities. Vulnerability Insight: The product contains a number of security vulnerabilities, including unauthenticated arbitrary file read as root, command injection in the web interface, privilege escalation to root, and command execution via the system update functionality. Affected Software/OS: WedgeOS version 4.0.4 and prior. Solution: Update to a version later than 4.0.4. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:P/A:N
Copyright	Copyright (C) 2015 Greenbone AG