Description
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901 | 1.18 – ≤ 1.4 | — |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901B | 1.18 – ≤ 1.4 | — |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5904D | 1.18 – ≤ 1.4 | — |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908 | 1.18 1.4 | — |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908A | 1.18 1.4 | — |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916 | 1.18 1.4 | — |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916A | 1.18 1.4 | — |