CVE-2020-26300

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.26.2

Description The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix.

Recommendations For versions prior to 4.26.2, upgrade to version 4.26.2 or later to resolve the issue. As a temporary workaround, consider checking or sanitizing service parameter strings that are passed to is.services(), is.inetChecksite(), si.inetLatency(), si.networkStats(), is.services(), and si.processLoad().