Description (CNA)
ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ArmorX Global Technology / ArmorX Spam | affected 0 before 8.15.2-3.282.133-1.90.061 |
CWE
CWE-93
References
- https://www.twcert.org.tw/tw/cp-132-11294-4e5d8-1.html
- https://www.twcert.org.tw/en/cp-139-11295-f2efd-2.html
ADP enrichment
No English description supplied.
No references supplied.