Command Execution vulnerability in Simplicity Installer

Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass parameters or arguments.  To successfully execute this attack, the attacker needs to be on the same network.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Silicon Labs Simplicity Studio 安全漏洞

Silicon Labs Simplicity Studio是美国Silicon Labs公司的一款嵌入式系统开发与调试的集成开发环境软件。 Silicon Labs Simplicity Studio存在安全漏洞，该漏洞源于端点接受JSON格式的用户可控输入，可能导致命令执行。

N/A

N/A