ID:5858 - Exploit for OS Command Injection in FlexAir - CVE-2019-7670

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to the application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. A remote attacker can execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation