2 matches found
Design/Logic Flaw
cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...
9.3CVSS9.1AI score0.03442EPSS
SaveExploits1References1Affected Software1
CVE-2019-15498: Improper Neutralization of Argument Delimiters in a Command
cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...
9.3CVSS6.4AI score0.03442EPSS
SaveExploits1References2
20