CVE-2020-25035

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5

Description: The issue allows for arbitrary code execution with root privileges. This is achieved through the chroothole client using a PHP call.

Recommendations: For UCOPIA Wi-Fi appliances version 6.0.5, consider restricting access to the chroothole client until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.