Command Injection Vulnerability in NA300 PLC

The NA300 PLC is a mid-size programmable controller. A command injection vulnerability exists in the NA300 PLC. The vulnerability stems from the failure of the system's ehtdbg program to properly handle input parameters, which allows an attacker to bypass checks and inject commands via constructe...