CyberSec.Space Logo
CVEブラウザに戻る

CVE-2017-6557

HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2017-05-05
Last Modified2026-05-13
Data SourcesNVD

Vulnerability Description

SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected Platforms (CPE)

📦
Xirrus

Arrayos

All versions

References & Advisories

🔗 https://github.com/amaciasf/array/blob/master/ArrayOS_AG_9_4_0_135_Release_Note.pdf
🔗 https://github.com/amaciasf/array/blob/master/ArrayOS_AG_9_4_0_135_Release_Note.pdf

関連する脆弱性情報

CVE-2025-666447.2

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.

CVE-2023-517079.8

MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3...

CVE-2022-428979.8

Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalatio...