Lucene search

K
osvGoogleOSV:GHSA-M6RW-M2V9-7HX4
HistoryMay 17, 2021 - 9:00 p.m.

OS Command Injection in wifiscanner

2021-05-1721:00:59
Google
osv.dev
10
wifiscanner
wifiscanner.js
code injection
default executable
binary path
arbitrary code
thingssdk wifi scanner 1.0.1
options

EPSS

0.011

Percentile

84.5%

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code.

EPSS

0.011

Percentile

84.5%

Related for OSV:GHSA-M6RW-M2V9-7HX4