critical9.8
CVE-2018-20053
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices.
Impact
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerner | Connectivity Engine 4 Firmware | before 201812 |