PT-2026-46383 · Unknown · Shibby Tomato+1
CVSS v2.0
8.3
High
| Vector | AV:N/AC:L/Au:M/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Shibby Tomato version 1.28.0000
Description
An OS command injection flaw exists in the Web UI component. The issue is located in the
start dhcpc() function within the /sbin/rc file, allowing a remote attacker to execute arbitrary operating system commands.Recommendations
Update Shibby Tomato version 1.28.0000 to FreshTomato, as the former project has been superseded by the latter.
As a temporary workaround, restrict access to the Web UI component to minimize the risk of exploitation.
Exploit
Fix
Command Injection
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freshtomato
Shibby Tomato