An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.
CPE | Name | Operator | Version |
---|---|---|---|
tv-ip1314pi_firmware | eq | 5.5.3 200714 |