Threats tagged 'ghsa-cw3c-9w3h-vf4q'

A command injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2 version 1.0.2. This vulnerability can be triggered via shell metacharacters in a POST request to /goform/set_LimitClient_cfg if the attacker has the ability to make such a request but does not have administrative access. The vulnerability has a low severity rating with a CVSS score of 3.1.