CVE-2011-4002: HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."

Unscored severity · published Nov 30, 2011

CVE-2011-4002

HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."

–

CVSS

2.1%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)2.1% · higher than 81% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Nikki · Mawashimono

through 6.6; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more · source: NVD

Affected product

Nikki

Mawashimono

All Nikki CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2011-4002

CVE.org

https://www.cve.org/CVERecord?id=CVE-2011-4002

jvn.jp

http://jvn.jp/en/jp/JVN48839888/index.html

jvndb.jvn.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000076