Περιγραφή
The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system-s ping command. An attacker can inject arbitrary OS commands, which will be executed with the privileges of the web server.
CVSS 9.8EPSS 1.026%Κίνδυνος 1.07
Προβολή πηγής- Δημοσίευση
- 2026-06-04 18:16:27
- Επηρεαζόμενες εκδόσεις
- cannotmatch
- Τύπος
- Υλικολογισμικό
- Διάνυσμα
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H