NetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp
Vulnerability Description
NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content' parameter to execute code and retrieve command output.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25468
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- azams
References
More from NetGain Systems
View All →Affected Vendor
NetGain Systems
View all reports →