Command injection

2021-07-0714:15:00

PRIOn knowledge base

www.prio-n.com

9.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.

CPENameOperatorVersion
xevolt2.1.0

CPE	Name	Operator	Version
	xevo	lt	2.1.0

References

www.twcert.org.tw/tw/cp-132-4887-ee5e3-1.html