EasyVirt DC NetScope Code Injection Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A code injection vulnerability has been identified in EasyVirt DC NetScope versions through 8.7.0. This vulnerability allows remote authenticated attackers to execute arbitrary code by exploiting specific parameters in the application. The affected parameters include 'lang' in '/international/keyboard/options', 'keyboard_layout' and 'keyboard_variant' in '/international/settings/keyboard', and 'timezone' in '/international/settings/timezone'.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server where EasyVirt DC NetScope is running.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.6remediation
0.0relevance
0.0threat
6.5urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.