Description (CNA)
Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the command substitution operator $( ). Attackers can inject arbitrary commands through the $( ) syntax when passed as arguments to allowed commands like ping to execute unrestricted shell access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Comtrend / AR-5310 | affected GE31-412SSG-C01_R10.A2pG039u.d24k |
CWE
CWE-306
References
- https://www.exploit-db.com/exploits/47149
- https://www.vulncheck.com/advisories/comtrend-ar-5310-ge31-412ssg-c01-r10-a2pg039u-d24k-restricted-shell-escape
ADP enrichment
No English description supplied.
No references supplied.