← Database

CVE-2008-6816

CRITICAL CVSS: 10.0 Published: 2009-05-28 Modified: 2026-06-16

Description

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.

Affected Platforms

Eaton Network Shutdown Module

Weakness Type

CWE-287

References