2 matches found
Sql injection
A shell injection issue in cosawifiapis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process running as root if the platform was compiled with the ENABLEFEATUREMESHWIFI macro. The attack is...
8.5CVSS8.1AI score0.01591EPSS
SaveExploits0References1Affected Software1
CVE-2019-6962: Improper Neutralization of Special Elements used in an OS Command
A shell injection issue in cosawifiapis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process running as root if the platform was compiled with the ENABLEFEATUREMESHWIFI macro. The attack is...
8.5CVSS6.4AI score0.01591EPSS
SaveExploits0References2
20