CVE-2023-37292

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Jul 21, 2023
Source updated: Oct 24, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

HGiga iSherlock - Command Injection

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock 5.5: before iSherlock-user-5.5-174.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

iSherlock 4.5

Vendor: HGiga
Product: iSherlock 4.5
Platforms: Unknown
Default status: unaffected

iSherlock 4.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
	`affected`	custom	iSherlock-user-4.5-174	Unavailable	None listed

iSherlock 5.5

Vendor: HGiga
Product: iSherlock 5.5
Platforms: Unknown
Default status: unaffected

iSherlock 5.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
	`affected`	custom	iSherlock-user-5.5-174	Unavailable	None listed