The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arbitrary CLI commands via the (1) start_hour, (2) start_minute, (3) end_hour, (4) end_minute, or (5) hostname parameter.
References
Link | Resource |
---|---|
https://www.navixia.com/CVE-2015-3441.txt | Third Party Advisory |
http://www.securityfocus.com/bid/95398 |
Configurations
Information
Published : 2017-01-05 14:59
Updated : 2017-01-17 18:59
NVD link : CVE-2015-3441
Mitre link : CVE-2015-3441
JSON object : View
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Products Affected
genexia
- drgos