UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Link | Tags |
---|---|
https://ucopia.com/en/solutions/product-line-wifi/ | product |
https://blog.globadis.com/blog/ucopia-v6-multiple-cves-root/ | exploit third party advisory technical description |