PT-2023-16423 · Dst-Admin · Dst-Admin
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
dst-admin version 1.5.0
Description
A critical vulnerability was found in dst-admin, affecting an unknown functionality of the file /home/cavesConsole. The manipulation of the
command argument leads to command injection. The attack can be launched remotely.Recommendations
For dst-admin version 1.5.0, consider disabling the functionality related to the file /home/cavesConsole to minimize the risk of exploitation. Restrict access to the
command argument to prevent command injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dst-Admin