Avalanche mobile device management arbitrary command execution SYSTEM privileges

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

WLAvalancheService Code Execution

The vulnerability of the WLAvalancheService service in the mobile device management system of Avalanche is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

Avalanche mapShare Arbitrary Command Execution

The vulnerability of the mapShare method in the Avalanche mobile device management system is related to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted data...