CVE-2023-3606 TamronOS ping os command injection

A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part of the file /api/ping. The manipulation of the argument host leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-3606

TamronOS (IPTV) contains a remote OS command injection in the /api/ping endpoint, caused by manipulation of the host parameter. Affects TamronOS versions up to 20230703; exploitation can be remote and the vulnerability has been publicly disclosed (CVE-2023-3606). The CVE entry notes no fix detail...