[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-06 17:44 UTC
Importiert: 2026-10-15 08:09 UTC
Quelle-ID: full_disc
uid_hash: 68c7d4c201b2f92db634be067db956569d52c8e1665a2086e58699df1d4e603b

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in the pwrstudio

daemon shipped in Circutor LineEds (Line Energy Data System) industrial energy gateway

firmware 24.11.14-r0, engine variant pss0. Circutor S.A. is in Spain; the appliance sits

between metering and power-quality instrumentation on one side and an energy-management

or SCADA back office on the other.

Type: operating-system command injection (CWE-78) reached without...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss