Command injection

2022-05-0915:15:00

PRIOn knowledge base

www.prio-n.com

galleon nts-6002-gps

command injection

web-management interface

ping

traceroute

dns lookup

networking tools

AI Score

7.2

Confidence

High

EPSS

0.019

Percentile

88.5%

JSON

An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected (Ping, Traceroute, and DNS Lookup) and their respective input fields (ping_address, trace_address, nslookup_address).