REDDOXX.Appliance.ExecuteDiag.Command.Injection

Description

This indicates an attack attempt to exploit a Remote Command Injection vulnerability in REDDOXX Appliance.
The vulnerability is due to insufficient sanitizing of user supplied inputs for the diagnostic tool "Ping". A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.

Affected Products

REDDOXX Appliance <= Build 2032 / v2.0.625

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrades or patches from the vendor.
https://my.reddoxx.com/documents/manual/en/custdl/product-downloads

References