critical9.8
CVE-2019-12771
Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/Vol…
Impact
Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinstation Project | Thinstation | through 6.1.1 |