Skip to content
Threat Feed

Tag

Cve-2019-25671

1 brief RSS
critical advisory

VA MAX 8.3.4 Remote Code Execution via changeip.php (CVE-2019-25671)

VA MAX 8.3.4 is vulnerable to remote code execution (CVE-2019-25671), allowing authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter via a POST request to changeip.php.

rce cve-2019-25671 web-application
2r 1t 1c 2i