| Package | Affected versions | Patched versions |
|---|---|---|
| iopsys | ≥ 1.0, ≤ 3.16 |
An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free