Description
The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2024.MS4.33 | 2024.MS4.33 |