PT-2021-19756
CVE-2021-32530
·
تاريخ النشر
2021-07-07
·
تاريخ التحديث
2021-09-20
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
QSAN XEVO versions prior to 2.1.0
Description:
The issue is an OS command injection vulnerability in the Array function of QSAN XEVO, allowing remote unauthenticated attackers to execute arbitrary commands via the
status parameter.Recommendations:
For versions prior to 2.1.0, update to version 2.1.0 to resolve the issue. As a temporary workaround, consider restricting access to the Array function to minimize the risk of exploitation. Avoid using the
status parameter in the affected function until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾