|    |    |    | Today: 15-Nov-2019 |

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

November 1, 2017 | Posted in ExploitAlert

EnGenius EnShare suffers from an unauthenticated command injection vulnerability in which an attacker can inject and execute arbitrary code as the root user via the 'path' GET/POST parameter parsed by 'usbinteract.cgi' script.


Source: EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

Taged in: Exploit