Danish1162

**Name of the Vulnerable Software and Affected Versions** TOZED X300 versions prior to 6.01.3 **Description** An OS command injection flaw exists in the IPPingDiagnostics Handler component. A remote attacker can exploit this by manipulating the `Host` argument within the `process ping()` function, allowing for the execution of arbitrary operating system commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.