Loading HuntDB...

Authenticated RCE in ToughSwitch

High
U
Ubiquiti Inc.
Submitted None

Team Summary

Official summary from Ubiquiti Inc.

In ToughSwitch v1.3.5 and prior, due to lack of validation is possible to execute an CSRF. If an authenticated user access an attacker controlled web page, it could trigger the CSRF and the resulting request could trigger an RCE.

Reported by maxpl0it

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

OS Command Injection