CVE-2020-21883

Name of the Vulnerable Software and Affected Versions: Unibox U-50 version 2.4 UniBox Enterprise Series version 2.4 UniBox Campus Series version 2.4

Description: The issue is related to an OS command injection vulnerability. This vulnerability is present in the "/tools/ping" API endpoint, which can lead to complete device takeover.

Recommendations: For Unibox U-50 version 2.4, consider restricting access to the "/tools/ping" API endpoint until a patch is available. For UniBox Enterprise Series version 2.4, avoid using the vulnerable "/tools/ping" endpoint to minimize the risk of exploitation. For UniBox Campus Series version 2.4, as a temporary workaround, consider disabling the functionality related to the "/tools/ping" endpoint until a fix is provided.