VYPR

firewall3

by Inteno

CVEs (1)

  • CVE-2018-20487HigApr 11, 2019
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall…