CVE-2020-8949

Various Gocloud and ISP3000 devices, including S2A_WL 4.2.7.16471 , S2A 4.2.7.17278 , S2A 4.3.0.15815 , S2A 4.3.0.17193 , S3A K2P MTK 4.2.7.16528 , S3A 4.3.0.16572 , and ISP3000 4.3.0.17190 , are vulnerable to an OS command injection vulnerability. The flaw exists due to the improper neutralizati...

PT-2020-20387

Name of the Vulnerable Software and Affected Versions Gocloud S2A WL version 4.2.7.16471 Gocloud S2A versions 4.2.7.17278, 4.3.0.15815, 4.3.0.17193 Gocloud S3A K2P MTK version 4.2.7.16528 Gocloud S3A version 4.3.0.16572 Gocloud ISP3000 version 4.3.0.17190 Description The issue allows remote...

CVE-2020-8949: Improper Neutralization of Special Elements used in an OS Command

Gocloud S2AWL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572, and ISP3000 4.3.0.17190 devices allows remote attackers to execute arbitrary OS commands via shell metacharacters in a ping operation, as demonstrated by the...