title: SevOne Network Management System Device Manager Page injection
description: A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.
problem types: CWE-74 Injection
affected:
{
product: Network Management System
vendor: SevOne
versions:
status: affected, version: 5.7.2.0
status: affected, version: 5.7.2.1
status: affected, version: 5.7.2.2
status: affected, version: 5.7.2.3
status: affected, version: 5.7.2.4
status: affected, version: 5.7.2.5
status: affected, version: 5.7.2.6
status: affected, version: 5.7.2.7
status: affected, version: 5.7.2.8
status: affected, version: 5.7.2.9
status: affected, version: 5.7.2.10
status: affected, version: 5.7.2.11
status: affected, version: 5.7.2.12
status: affected, version: 5.7.2.13
status: affected, version: 5.7.2.14
status: affected, version: 5.7.2.15
status: affected, version: 5.7.2.16
status: affected, version: 5.7.2.17
status: affected, version: 5.7.2.18
status: affected, version: 5.7.2.19
status: affected, version: 5.7.2.20
status: affected, version: 5.7.2.21
status: affected, version: 5.7.2.22
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]