PT-2023-24836

Name of the Vulnerable Software and Affected Versions peplink Surf SOHO HW1 version 6.3.5 Description An OS command injection issue exists in the data.cgi xfer dns functionality. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to...