Ericsson Network Location Command Injection (CVE-2021-43339)

A command injection vulnerability exists in Ericsson Network Location. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-43339

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via filename in the export functionality. For example, a new admin user could be created...

CVE-2021-43339

CVE-2021-43339 affects Ericsson Network Location. The export functionality allows an authenticated attacker to inject commands via the file_name parameter, potentially enabling remote command execution (e.g., creating a new admin user). Red Hat and Checkpoint advisories corroborate a command-inje...