Threats tagged 'ghsa-737p-6gj8-mw89'

Cudy TR3000 devices running firmware versions before 2.5.42 have a command injection vulnerability in the OpenVPN client configuration handling. Authenticated administrators can upload a crafted .ovpn file with a malicious remote host token containing a semicolon, which breaks out of the intended command context and allows execution of arbitrary commands as root.