CVE-2016-10312 Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execut...
CriticalCVSS 9.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jensenofscandinavia al3g firmware | = 2.23m | No fix listed |
| jensenofscandinavia al5000ac firmware | = 1.13 | No fix listed |
| jensenofscandinavia al59300 firmware | = 1.04 | No fix listed |
References
- www.riskbasedsecurity.com exploit technical-description third-party-advisory