Skip to content
OpenAdvisories
High · 8.1 CVE-2020-35851 EUVD-2020-23506GHSA-f62f-7p64-pmrv

HGiga MailSherlock - Command Injection

Published Dec 31, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Description

HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.

Affected products

VendorProductAffectedFixed
HGiga MailSherlock MSR45/SSR45 unspecified – < 115 115

References