Description
Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call.
Unscored
CVE-2019-10656
EUVD-2019-2456GHSA-x2rc-jmc3-v5q4
Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the file…
Published Mar 30, 2019 · Updated Aug 4, 2024 · Assigned by mitre