CVE-2017-6048 in the critical feed json
A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c…
published 2017-05-19 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-15116
- cvss
- 8.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 15.5%
- EPSS 15.5% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Metasploit
Summary
A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-17-131-02 updated cvss 8.8
Satel Iberia SenNet Data Logger and Electricity Meters
-
Satel Iberia SenNet Multitask Meter <= 5.21a-1.18b Satel Iberia SenNet Optimal DataLogger <= 5.37c-1.43c Satel Iberia SenNet Solar Datalogger <= 5.03-1.56aaffected: mitigation “Satel Iberia recommends that affected users upgrade to the latest version available. The latest version can be obtained from Satel Iberia support at support@satelspain.com.”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
Timeline
- First public exploit (Metasploit auxiliary/scanner/telnet/satel_cmd_exec)
- Published
Exploit prediction
15.54% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit auxiliary/scanner/telnet/satel_cmd_exec Satel Iberia SenNet Data Logger and Electricity Meters Command Injection Vulnerability metasploit auxiliary, normal rank, 2017-04-07
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Affected products
- n/a Satel Iberia SenNet Data Logger and Electricity Meters
Classification
- Weakness
-
- CWE-77 Improper Neutralization of Special Elements used in a Command
References
-
ics-cert.us-cert.gov
/advisories/ICSA-17-131-02
mitigation, third-party-advisory, us-government-resource
Sources
- CVE List CVE-2017-6048
- NVD CVE-2017-6048
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.