high8.8
CVE-2019-7632
LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the suppor…
Impact
LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter. The lifesize default password for the cli account may sometimes be used for authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lifesize | Team 220 Firmware | All versions |
| Lifesize | Passport 220 Firmware | All versions |
| Lifesize | Networker 220 Firmware | All versions |
| Lifesize | Room 220 Firmware | All versions |