Threats tagged 'ghsa-9f94-c996-h2pj'

C-Kermit versions from 6.0.192 up to but not including 11.1.515 contain a remote code execution vulnerability. This flaw allows attackers to execute shell commands on servers even when host commands are disabled by exploiting REMOTE QUERY evaluation. Attackers can invoke the command function or define and execute macros to bypass restrictions, leading to full compromise. The vulnerability has a high severity score of 8.1 CVSS v3.1.