CVE-2026-14371:详情

CVE-2026-14371

2026-07-16
17h16 +00:00
OS Command Injection
A03-Injection
2026-10-24
20h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-78 Improper Neutralization of Special Elements used in an OS Command
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.

参考资料