PT-2022-12001
CVE-2021-44132
·
Published
2022-02-25
·
Updated
2022-03-08
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
C-DATA ONU4FERW version 2.1.13 X139
Description
A command injection issue in the function formImportOMCIShell allows attackers to execute arbitrary commands via a crafted file.
Recommendations
For version 2.1.13 X139, consider disabling the formImportOMCIShell function until a patch is available to prevent command injection attacks.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾