high8.8
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to c…
Impact
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Indionetworks | Unibox U50 Firmware | Version 2.4 |
| Indionetworks | Unibox U500 Firmware | Version 2.4 |
| Indionetworks | Unibox U1000 Firmware | Version 2.4 |
| Indionetworks | Unibox U2500 Firmware | Version 2.4 |
| Indionetworks | Unibox U5000 Firmware | Version 2.4 |