Skip to content
OpenAdvisories
Critical · 9.9 CVE-2022-32572 EUVD-2022-35638GHSA-g3wj-545m-53g7

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A …

Published Aug 22, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
WWBN AVideo 11.6, dev master commit 3f7c0364 —

References