Description (CNA)
A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/system.html. The manipulation of the argument uploadedFile with the input ;whoami leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Alien Technology / ALR-F800 | affected 19.10.0; affected 19.10.1; affected 19.10.2; affected 19.10.3; affected 19.10.4; affected 19.10.5; affected 19.10.6; affected 19.10.7; affected 19.10.8; affected 19.10.9; affected 19.10.10; affected 19.10.11; affected 19.10.12; affected 19.10.13; affected 19.10.14; affected 19.10.15; affected 19.10.16; affected 19.10.17; affected 19.10.18; affected 19.10.19; affected 19.10.20; affected 19.10.21; affected 19.10.22; affected 19.10.23; affected 19.10.24 |
CWE
CWE-78
References
- https://vuldb.com/?id.273860
- https://vuldb.com/?ctiid.273860
- https://vuldb.com/?submit.382481
- https://github.com/Push3AX/vul/blob/main/Alien%20Technology%20/ALR-F800.md
ADP enrichment
No English description supplied.
No references supplied.