VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 19, 2020· Updated Jun 17, 2026

CVE-2020-13167

CVE-2020-13167

Description

Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Netsweeper/Netsweeper2 versions
    cpe:2.3:a:netsweeper:netsweeper:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:netsweeper:netsweeper:*:*:*:*:*:*:*:*range: <=6.4.3
    • (no CPE)range: <=6.4.3
  • Netsweeper/Netsweeperdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.