ISOMAN

CVE

CVE-2019-12771

Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Thinstation6.1.1 x86 installer standardunknownsource
Thinstation5.6.1 x86 installer standardunknownsource
Thinstation5.6.0 x86 installer standardunknownsource
Thinstation5.5.2 x86 installer standardunknownsource
Thinstation5.5.1 x86 installer standardunknownsource
Thinstation5.5.0 x86 installer standardunknownsource
Thinstation5.4.2 x86 installer standardunknownsource
Thinstation5.4.1 x86 installer standardunknownsource
Thinstation5.4.0 x86 installer standardunknownsource
Thinstation5.3.1 x86 installer standardunknownsource
Thinstation5.3.0 x86 installer standardunknownsource
Thinstation5.2.4 x86 installer standardunknownsource
Thinstation5.2.3 x86 installer standardunknownsource
Thinstation5.2.2 x86 installer standardunknownsource
Thinstation5.2.1 x86 installer standardunknownsource
Thinstation5.2.0 x86 installer standardunknownsource
Thinstation5.1.4 x86 installer standardunknownsource
Thinstation5.1.3 x86 installer standardunknownsource
Thinstation5.1.2 x86 installer standardunknownsource
Thinstation2.5 x86 installer standardunknownsource

References

  1. https://github.com/Thinstation/thinstation/issues/427
  2. https://github.com/Thinstation/thinstation/issues/427