CVE-2011-4002
UnknownEPSS 2.26%
Last modified
CVE-2011-4002 is a vulnerability of currently unknown severity. HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability.". EPSS estimates a 2.26% chance of exploitation in the next 30 days.
Description
HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mawashimono | Nikki | <= 6.6 |
| Mawashimono | Nikki | 1.1 |
| Mawashimono | Nikki | 1.2 |
| Mawashimono | Nikki | 1.3 |
| Mawashimono | Nikki | 1.4 |
| Mawashimono | Nikki | 1.5 |
| Mawashimono | Nikki | 1.6 |
| Mawashimono | Nikki | 1.41 |
| Mawashimono | Nikki | 2.0 |
| Mawashimono | Nikki | 2.4 |
| Mawashimono | Nikki | 2.5 |
| Mawashimono | Nikki | 2.6 |
| Mawashimono | Nikki | 2.7 |
| Mawashimono | Nikki | 2.8 |
| Mawashimono | Nikki | 2.61 |
| Mawashimono | Nikki | 2.62 |
| Mawashimono | Nikki | 2.71 |
| Mawashimono | Nikki | 2.81 |
| Mawashimono | Nikki | 3.0 |
| Mawashimono | Nikki | 3.1 |
| Mawashimono | Nikki | 3.01 |
| Mawashimono | Nikki | 3.02 |
| Mawashimono | Nikki | 3.2 |
| Mawashimono | Nikki | 3.3 |
| Mawashimono | Nikki | 3.03 |
| Mawashimono | Nikki | 3.11 |
| Mawashimono | Nikki | 3.12 |
| Mawashimono | Nikki | 3.13 |
| Mawashimono | Nikki | 3.21 |
| Mawashimono | Nikki | 3.22 |
| Mawashimono | Nikki | 4.0 |
| Mawashimono | Nikki | 4.01 |
| Mawashimono | Nikki | 4.3 |
| Mawashimono | Nikki | 4.4 |
| Mawashimono | Nikki | 4.5 |
| Mawashimono | Nikki | 4.6 |
| Mawashimono | Nikki | 4.7 |
| Mawashimono | Nikki | 4.8 |
| Mawashimono | Nikki | 4.10 |
| Mawashimono | Nikki | 4.11 |
| Mawashimono | Nikki | 4.12 |
| Mawashimono | Nikki | 4.20 |
| Mawashimono | Nikki | 4.21 |
| Mawashimono | Nikki | 4.22 |
| Mawashimono | Nikki | 4.23 |
| Mawashimono | Nikki | 4.24 |
| Mawashimono | Nikki | 4.25 |
| Mawashimono | Nikki | 4.31 |
| Mawashimono | Nikki | 4.41 |
| Mawashimono | Nikki | 4.42 |
Showing 50 of 155 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-4002?
HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
How severe is CVE-2011-4002?
Severity scoring for CVE-2011-4002 is pending analysis. The EPSS model estimates a 2.26% probability of exploitation in the next 30 days.
How do I fix CVE-2011-4002?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-3996The LiveData Service in CSWorks before 2.0.4115.1 allows rem…
- CVE-2011-3997Opengear console servers with firmware before 2.2.1 allow re…
- CVE-2011-3998Cross-site scripting (XSS) vulnerability in Apple WebObjects…
- CVE-2011-3999Cross-site scripting (XSS) vulnerability in the RSS/Atom fee…
- CVE-2011-4000Buffer overflow in ChaSen 2.4.x allows remote attackers to e…
- CVE-2011-4001Directory traversal vulnerability in HP no Mawashimono Nikki…
- CVE-2011-4004Buffer overflow in the ATAS32 processing functionality in th…
- CVE-2011-4005Cross-site request forgery (CSRF) vulnerability in the Servi…
- CVE-2011-4006The ESMTP inspection feature on Cisco Adaptive Security Appl…
- CVE-2011-4007Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handl…
- CVE-2011-4012Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3…
- CVE-2011-4014The TAC Case Attachment tool in Cisco Wireless Control Syste…
Are you affected by CVE-2011-4002?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
