CVE-2020-29311

Name of the Vulnerable Software and Affected Versions Ubilling version 1.0.9

Description The issue allows Remote Command Execution as a Root user. This is achieved by injecting a malicious command inside the config file, which is then triggered by another part of the software.

Recommendations For Ubilling version 1.0.9, consider restricting access to the config file to prevent malicious command injection until a patch is available. As a temporary workaround, monitor the system for any suspicious activity that may indicate exploitation of this issue.