Description
myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the device.
Unscored
CVE-2018-15477
EUVD-2018-7355GHSA-8vgj-9p88-3q57
myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious s…
Published Aug 30, 2018 · Updated Aug 5, 2024 · Assigned by mitre