Описание
Prima Systems FlexAir devices allow Unauthenticated Command Injection resulting in Root Remote Code Execution.
Prima Systems FlexAir devices allow Unauthenticated Command Injection resulting in Root Remote Code Execution.
Связанные уязвимости
CVSS3: 8.8
nvd
больше 6 лет назад
Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges.