{"cvss":0.0,"datePublished":"2019-12-13T00:00:00Z","dateUpdated":"2019-12-13T00:00:00Z","description":"An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.","dueDate":"","id":"CVE-2019-16072","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"enigma_network_management_solution","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"netsas enigma_network_management_solution Improper Neutralization of Special Elements used in an OS Command","vendor":"netsas"}