Description
A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ligowave | UNITY | ≤ 6.95-2 | — |
| Ligowave | PRO | ≤ 6.95-1.rt3883 | — |
| Ligowave | MIMO | ≤ 6.95-1.rt2880 | — |
| Ligowave | APC Propeller | ≤ 2-5.95-4.rt3352 | — |
References
- https://onekey.com/blog/security-advisory-remote-code-execution-in-ligowave-devices/ third-party-advisory