CVE-2024-44610

The PCAN-Ethernet Gateway FD (before version 1.3.0) and PCAN-Ethernet Gateway (before version 2.11.0) are vulnerable to command injection via shell metacharacters in the processing.php software update. An attacker with web interface credentials can execute arbitrary commands as the www-data user ...