Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 5.9%	CVE-2025-34103WiPG-1000 · OS Command Injection Critical9.3EPSS 5.9%2025-07-15CVE Database V5CVE-2025-34103 An unauthenticated command injection vulnerability exists in WePresent WiPG-1000 firmware versions prior to 2.2.3.0, due to improper input handling in the undocumented /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a system call, allowing an unauthenticated remote attacker to execute arbitrary commands as the web server user. EPSS 5.9%Vulnerability WePresent (Barco)#cwe-78 #cwe-306	CVE Database V5	2025-07-15

Showing 1–1 of 1 result