Description
Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TURCK TBEN-LL-SE-M2
Default version status: unaffected
0.0.0 to ≤ 2.0.6.0affected
TURCK TBEN-L4-SE-M2
Default version status: unaffected
0.0.0 to ≤ 2.0.6.0affected
TURCK TBEN-L5-SE-M2
Default version status: unaffected
0.0.0 to ≤ 2.0.6.0affected