The vulnerability of the setNatConfig function in the /Interface/DevManage/VM.php file of the urban terminal software allows a violator to execute arbitrary commands.

The vulnerability of the setNatConfig function in the /Interface/DevManage/VM.php file of the urban terminal microprogramming system for intelligent traffic control of Uniview ISC 2500-S exists due to the lack of measures to neutralize special elements used in the operating system commands...