Command injection

2023-10-1610:15:00

PRIOn knowledge base

www.prio-n.com

os command injection

http request

arbitrary command execution

vulnerability

freshtomato 2023.3

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
freshtomatoeq2023.3

CPE	Name	Operator	Version
	freshtomato	eq	2023.3

References

govtech-csg.github.io/security-advisories/2023/10/16/CVE-2023-3991.html