Description
Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. Attackers can inject crafted arguments into these tcpdump launch routines to manipulate executed system commands on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Netcore | NR255-V | 1.5.130703 | — |