CVE-2016-2332 flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066...
HighCVSS 8.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066 (aka dnsmasq) parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| systech syslink sl-1000 modular gateway firmware | All versions | No fix listed |
References
- VU#822980 third-party-advisory us-government-resource