Description (CNA)
The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hgiga / OAKlouds | affected earlier before 188 |
| Hgiga / OAKlouds | affected earlier before 1051 |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-7673-688b7-1.html
- https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.