CVE-2020-12775

Name of the Vulnerable Software and Affected Versions Hicos citizen certificate client-side component (affected versions not specified)

Description The Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this issue to perform a command injection attack, allowing the execution of arbitrary system commands, disruption of the system, or termination of services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.