CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-08
rConfig <= 3.94 Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2020-10221)
[Affected Scope] rConfig network configuration management servers running version 3.94 and prior
[Impact] Authenticated attackers can execute arbitrary OS commands with web server privileges by injecting shell metacharacters into the fileName parameter, leading to full system compromise
[Mitigation] Upgrade to the latest secure version of rConfig, restrict access to the vulnerable PHP script, and implement strict input validation