Skip to content
Threat Feed

Product

Electerm (<= 3.7.8)

1 brief RSS
high advisory

Electerm Remote Code Execution Vulnerability via Malicious Filenames

A remote code execution vulnerability exists in Electerm versions 3.7.8 and earlier, where a malicious SSH server can inject arbitrary commands into a victim's system by crafting filenames with shell metacharacters that are executed when the user attempts to open or edit the file using the 'open with system editor' or 'edit with custom editor' feature.

electerm rce sftp remote code execution
2r 1t 1c