CVE-2019-12771

2019-06-0713:05:23

mitre

www.cve.org

9.8 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.2%

JSON

Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring.

References

github.com/Thinstation/thinstation/issues/427