CVE-2008-6816
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute...
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
Exploit likelihood
What each source reports
NVD Score used
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
- Record
CVE-2008-6816- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
- Record
CVE-2008-6816- Updated
- 2026-11-02
EUVDEUVD-2008-6776 No score
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
- Record
EUVD-2008-6776- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9r6p-3954-jm8w No score
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute...
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
- Record
GHSA-9r6p-3954-jm8w- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6816 is a high vulnerability (CVSS 10.0) in Eaton Network Shutdown Module, published May 28, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. No source names a fixed version.
References
nruns.com/security_advisory_eaton_mge_ops_network_shutdown_module_authentication_bypass.php
exchange.xforce.ibmcloud.com/vulnerabilities/46131
download.mgeops.com/install/win32/nsm/release_note_nsm_320.txt
securityfocus.com/archive/1/497824/100/100/threaded
secunia.com/advisories/32456
osvdb.org/50051
nvd.nist.gov/vuln/detail/CVE-2008-6816
github.com/advisories/GHSA-9r6p-3954-jm8w