ID:3054 - Exploit for Command Injection in InterScan Web Security Virtual Appliance (IWSVA) - CVE-2020-8605

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary commands on the system.

The vulnerability exists due to improper input validation in the "mount_device" parameter within the "LogSettingHandler" class. A remote authenticated attacker can execute arbitrary commands on the target system.

Remediation