CVE-2024-44610

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...

CVE-2024-44610: Improper Neutralization of Special Elements used in a Command

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...

CVE-2024-44610

The PCAN-Ethernet Gateway FD (before version 1.3.0) and PCAN-Ethernet Gateway (before version 2.11.0) are vulnerable to command injection via shell metacharacters in the processing.php software update. An attacker with web interface credentials can execute arbitrary commands as the www-data user ...

PT-2024-31197

Name of the Vulnerable Software and Affected Versions PCAN-Ethernet Gateway FD versions prior to 1.3.0 PCAN-Ethernet Gateway versions prior to 2.11.0 Description The issue is related to Command injection via shell metacharacters in a Software Update to processing.php. This allows for potential...