CVE-2016-2332

Affected product: SysLINK SL-1000 M2M Modular Gateway. Vulnerability: Command injection via the web interface (flu.cgi) where the 5066 parameter (dnsmasq) can be exploited by an authenticated user to execute arbitrary commands with root privileges. Root cause: Web interface processes crafted POST...