CVE-2020-26274

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.31.1

Description The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions prior to 4.31.1, upgrade to version 4.31.1 or later to resolve the issue. As a temporary workaround, consider checking or sanitizing service parameter strings that are passed to si.inetLatency().