E19-7rw61
CVSS:
9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
15
Year:
2019
Description
A command injection vulnerability exists in the rConfig network device configuration management tool.
The vulnerability is due to insufficient input validation in the 'ajaxServerSettingsChk.php' module.
A remote, unauthenticated attacker can create a malicious HTTP request resulting in arbitrary command execution on the target system with the privileges of the user running the web server.
