PT-2019-16650

Name of the Vulnerable Software and Affected Versions Lifesize Icon version 3.7.0 2421 Description A Remote Code Execution issue in the DNS Query Web UI allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request. Recommendations...

CVE-2019-3702: Improper Neutralization of Special Elements used in an OS Command

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LSRM33.7.0 2421 allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request...