Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/19 12:00 a.m.•8 views

CVE-2025-23170: Improper Neutralization of Special Elements used in a Command

The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The underlying Python script, shell-connect.py, is vulnerable to command injection through the user argument. This allows an attacker to execu...

6.7CVSS6.3AI score0.0059EPSS
SaveExploits0References3
Rows per page
Query Builder