CVE-2018-18600 The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.

HighCVSS 8.1 EPSS 1.6%

Description

The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.

Product	Affected versions	Fixed in
guardzilla 180 outdoor firmware	All versions	No fix listed
guardzilla 180 indoor firmware	All versions	No fix listed

8.1 High

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

All scores (3)

EPSS (exploitation probability, 30 days): 1.63% (percentile 76.6)
CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.