2 matches found
CVE-2024-37570
On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update upgrade.html page does not perform sanitization on the username and path parameters sent by an authenticated user before appending flags to the busybox ftpget command. This leads to $ command execution...
8.8CVSS6.9AI score0.0106EPSS
SaveExploits3References1
CVE-2024-37570
On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update upgrade.html page does not perform sanitization on the username and path parameters sent by an authenticated user before appending flags to the busybox ftpget command. This leads to $ command execution...
7AI score0.0106EPSS
SaveExploits3References2
20