CVE-2020-29311 - Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software

Back Back to CVE browser

CRITICAL

Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software

Published Dec 10, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 6.56%

Description

Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-306

Missing Authentication

CWE-78

OS Command Injection

References (3)

https://drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing
x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing
x_refsource_MISCExploitThird Party Advisory
https://gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing		x_refsource_MISCExploitThird Party Advisory
https://gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e		x_refsource_MISCExploitThird Party Advisory