CVE-2019-7383: OS Command Injection
Published Mar 17, 2019
·Updated
An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/ispupdateedit.php does not properly validate user input, which leads to shell command injection via the des parameter.
Affected Software
12 affected components
Systrome Cumilon Isg-600c Firmware=1.1-r2.1
Systrome Cumilon ISG-600C
Systrome Cumilon Isg-600h Firmware=1.1-r2.1
Systrome Cumilon Isg-600h
Systrome Cumilon Isg-800w Firmware=1.1-r2.1
Systrome Cumilon Isg-800w
All of the following
Systrome Cumilon Isg-600c Firmware=1.1-r2.1
Systrome Cumilon ISG-600C
All of the following
Systrome Cumilon Isg-600h Firmware=1.1-r2.1
Systrome Cumilon Isg-600h
All of the following
Systrome Cumilon Isg-800w Firmware=1.1-r2.1
Systrome Cumilon Isg-800w
Event History
Mar 17, 2019
CVE Published
via MITRE·07:04 PM
Data Sourced
via MITRE·07:04 PM
Description
Mar 21, 2019
Data Sourced
via NVD·04:01 PM
DescriptionSeverityWeaknessAffected Software