← CVE Intelligence

CVE-2023-3991

OS command injection vulnerability in FreshTomato 2023.3 PUBLISHED

Description (CNA)

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
FreshTomato / FreshTomatoaffected 2023.3

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.