CWE-20

CWE-20

  • Severity: HIGH
  • CVE: CWE-20
  • Affected Hardware: BLU-IC2, BLU-IC4
  • Firmware Version: 1.19.5
  • Mitigations: NO
  • Reported by: Kevin Schaller, Benjamin Lafois, Alexi Bitsios, Sebastian Toscano, Dominik Schneider
  • Active exploitation of vulnerability: NO
  • Description: Mail Configuration File Manipulation + Command Execution
  • Which versions patch releases are available for: 1.20