CVE-2019-10659

CVE-2019-10659 affects Grandstream GXV3370 (before 1.0.1.41) and WP820 (before 1.0.3.6). A remote authenticated attacker can execute arbitrary code by supplying shell metacharacters in the /manager?action=getlogcat priority parameter. Reported impact indicates remote code execution with at least ...