Description
/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.
Unscored
CVE-2019-19117
EUVD-2019-8751GHSA-5f22-h5m6-x6fq
/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute …
Published Nov 18, 2019 · Updated Aug 5, 2024 · Assigned by mitre