Security News > 2019 > November > Critical Remote Code Execution Flaw Found in Open Source rConfig Utility

Critical Remote Code Execution Flaw Found in Open Source rConfig Utility

2019-11-04 16:38

The network configuration management utility has two unpatched critical remote code execution vulnerabilities.

News URL

https://threatpost.com/critical-rce-flaw-in-rconfig/149847/

#codeexecution #critical #opensource

Related news

Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution (source)
UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools (source)
Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution (source)

Related vendor

VENDOR	LAST 12M	#/PRODUCTS	LOW	MEDIUM	HIGH	CRITICAL	TOTAL VULNS
Rconfig		1	0	8	24	12	44

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.