cve/2023/CVE-2023-3991.md
2024-05-25 21:48:12 +02:00

847 B

CVE-2023-3991

Description

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

POC

Reference

No PoCs from references.

Github