Description (CNA)
A vulnerability was identified in WAYOS LQ_04, LQ_05, LQ_06, LQ_07 and LQ_09 22.03.17. This affects an unknown function of the file /usb_paswd.asp. The manipulation of the argument Name leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WAYOS / LQ_04 | affected 22.03.17 |
| WAYOS / LQ_05 | affected 22.03.17 |
| WAYOS / LQ_06 | affected 22.03.17 |
| WAYOS / LQ_07 | affected 22.03.17 |
| WAYOS / LQ_09 | affected 22.03.17 |
CWE
CWE-77, CWE-74
References
- https://vuldb.com/?id.326082
- https://vuldb.com/?ctiid.326082
- https://vuldb.com/?submit.658913
- https://vuldb.com/?submit.661153
- https://vuldb.com/?submit.661168
- https://vuldb.com/?submit.661177
- https://vuldb.com/?submit.661178
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py3shgm1z88g9xp2?singleDoc
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/ogyduynf84q89x99?singleDoc
ADP enrichment
No English description supplied.