2 matches found
CVE-2018-15477
myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the device...
9.8CVSS5.8AI score0.01592EPSS
SaveExploits0References1
CVE-2018-15477: Improper Neutralization of Special Elements used in an OS Command
myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the device...
10CVSS8.1AI score0.01592EPSS
SaveExploits0References2
20