Vulnerabilities (CVE)

Filtered by vendor Compal Subscribe
Filtered by product Ch7465lg Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-17499 1 Compal 2 Ch7465lg, Ch7465lg Firmware 2019-10-17 9.0 HIGH 8.8 HIGH
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter.