critical9.8
CVE-2020-10250
BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.
Impact
BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Meinbwa | Direx-Pro Firmware | Version 1.2181 |