Описание
PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.
A flaw was found in PingTools. The application incorporates arbitrary input from the Host field of a Watcher Internet Control Message Protocol (ICMP) service directly into a system shell command without adequate sanitization. A local attacker can exploit this vulnerability to execute arbitrary commands with the privileges of the application.
Отчет
This vulnerability is evaluated as an Important impact because an authenticated local attacker can leverage unvalidated parameters to trigger arbitrary command execution within the running application process, bypassing normal input constraints without requiring elevated permissions. However, PingTools is a third-party mobile utility application and is not included, shipped, or supported in Red Hat Enterprise Linux or any other Red Hat product. As a result, Red Hat enterprise platforms are not affected by this flaw.
Дополнительная информация
Статус:
EPSS
7.8 High
CVSS3
Связанные уязвимости
PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.
PingTools Network Utilities 4.64 Free accepts an arbitrary value in the Host field of a Watcher ICMP service, incorporating that value into a command string executed as sh -c.
EPSS
7.8 High
CVSS3