2 matches found
OS Command Injection in wifiscanner
wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...
9.8CVSS4.1AI score0.02533EPSS
SaveExploits1References3Affected Software1
CVE-2020-15362: Improper Neutralization of Special Elements used in an OS Command
wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...
9.8CVSS6.6AI score0.02533EPSS
SaveExploits1References2
20