Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/04/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| omnipcx enterprise communication server | ≤ 7.1 |
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free