PT-2020-14866
CVE-2020-16279
·
تاريخ النشر
2020-08-20
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
RangeeOS version 8.0.4
Description
The issue arises from the Kommbox component's failure to sanitize untrusted user-supplied input before passing it to the command line, leading to Remote Code Execution.
Recommendations
For RangeeOS version 8.0.4, ensure that all user input is properly sanitized before it is passed to the command line to prevent Remote Code Execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾