Posted by disclosure via Fulldisclosure on Sep 260day Rubbish Research Team is publicly disclosing a vulnerability in MultiTech Conduit AEP (models mtcdt / mtcdtip / mtcdtiphp), IoT gateways running mLinux on ARM 32-bit. Type: authenticated OS command injection (CWE-78) through the uploaded filename of the admin-only upload_config command. The... Weiterlesen: [0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_confi…
Intelligence View
⚡ tsecurity.de Intelligence
[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)
Posted by disclosure via Fulldisclosure on Sep 260day Rubbish Research Team is publicly disclosing a vulnerability in MultiTech Conduit AEP (models mtcdt /…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege