PT-2019-18676

Name of the Vulnerable Software and Affected Versions LifeSize Team, Room, Passport, and Networker 220 devices affected versions not specified Description The issue allows authenticated remote OS command injection. This can be demonstrated by using shell metacharacters in the mtu size parameter o...

CVE-2019-7632: Improper Neutralization of Special Elements used in an OS Command

LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtusize parameter. The lifesize default password for the cli account may sometimes be used for authentication...