What the vulnerability does

01Description

WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.

Key dates

02Disclosure timeline

April 9, 2020 CVE published
August 4, 2024 Record updated