Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zultys MX Administrator client has a "Patch Manager" section that allows administrators to apply patches to the device. The user supplied filename for the patch file is passed to a shell script without validation. Including bash command substitution characters in a patch file name results in execution of the provided command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zultys MX Series 安全漏洞
Vulnerability Description
Zultys MX Series是美国Zultys公司的一系列 IP 电话。 Zultys MX Series存在安全漏洞，该漏洞源于允许经过身份验证的远程用户执行操作系统命令注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A