PT-2026-68459 · Unknown · Shibby Tomato+1
CVSS v2.0
8.3
High
| Vector | AV:N/AC:L/Au:M/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Shibby Tomato version 1.28.0000
Description
An OS command injection flaw exists in the
new qoslimit stop() function within the /tmp/qoslimittc stop.sh file. A remote attacker can exploit this by manipulating the wan iface argument to execute arbitrary operating system commands.Recommendations
For version 1.28.0000, migrate to FreshTomato, as the Shibby Tomato project has been superseded by it.
Exploit
Fix
Command Injection
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freshtomato
Shibby Tomato