CVE-2018-16282

CVE-2018-16282 affects Moxa EDR-810 devices (V4.2 build 18041013). The issue is a command injection in the web server exposed at /xml/net_WebCADELETEGetValue, exploitable by sending a crafted caname value to achieve arbitrary OS commands with root privileges remotely. Multiple sources (NVD entry,...