Skip to content
OpenAdvisories

Product · Cypress

200

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Upgrade

    Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execute shell commands. Attackers can exploit the 'fw_url' parameter in the ctm-config-upgrade.sh script t…