An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-08-20T18:10:54
Updated: 2024-08-04T16:18:44.442Z
Reserved: 2020-10-21T00:00:00
Link: CVE-2020-27464
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-08-20T19:15:08.440
Modified: 2024-11-21T05:21:13.840
Link: CVE-2020-27464
Redhat
No data.