CVE-2023-36622: Improper Neutralization of Special Elements used in an OS Command

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter...

PT-2023-25638

Name of the Vulnerable Software and Affected Versions Loxone Miniserver Go Gen.2 versions prior to 14.1.5.9 Description The issue allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter in the websocket configuration endpoint. Recommendations For...