[0day-rubbish] Minuteman UPS Network Management Card 1.60.3 Unauthenticated OS command injection to root RCE (9.8)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-04 00:11 UTC
  • Importiert: 2026-09-04 00:48 UTC
  • Quelle-ID: full_disc
  • uid_hash: c663d73ec95c5909f5985bea7b0fc3662103d7464a03fd6cbac6d79a765a4f95
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Sep 03 0day Rubbish Research Team is publicly disclosing a vulnerability in Minuteman UPS Network Management Card 1.60.3.

Type: Unauthenticated OS command injection to root RCE (CWE-78)

CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Impact: Root command execution on the UPS/PDU power-management card: power telemetry, configuration, credentials, and

power-infrastructure settings under attacker control.

Authentication: unauthenticated /...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste