1 matches found
CVE-2025-23170: Improper Neutralization of Special Elements used in a Command
The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The underlying Python script, shell-connect.py, is vulnerable to command injection through the user argument. This allows an attacker to execu...
6.7CVSS6.3AI score0.0059EPSS
SaveExploits0References3
20