CVE-2016-6534

HIGH 7.5CVE-2016-6534 · Published 10/04/2017 · updated 17/06/2026

In short

CVE-2016-6534 is a HIGH (CVSS 7.5) vulnerability affecting network management information system (opmantek).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
network management information system opmantek	`≤ 4.3.6f≤ 8.5.10g`	No fix yet

Description

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations.

References

community.rapid7.com/community/infosec/blog/2016/09/07/multiple-disclosures-for-multiple-network-management-systems-part-2 · Third Party Advisory

More vulnerabilities in network management information system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free