High severity7.5NVD Advisory· Published Apr 10, 2017· Updated Jun 17, 2026

CVE-2016-6534

Description

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations.

Affected products

Opmantek/Nmisinferred2 versions
< 8.5.12G+ 1 more
- (no CPE)range: < 8.5.12G
- (no CPE)range: <4.3.7c
Opmantek/Network Management Information System
cpe:2.3:a:opmantek:network_management_information_system:*:*:*:*:*:*:*:*
Range: <=4.3.6f

Patches

Vulnerability mechanics

References

community.rapid7.com/community/infosec/blog/2016/09/07/multiple-disclosures-for-multiple-network-management-systems-part-2nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000