Vulnerabilities > Genieacs

DATE CVE VULNERABILITY TITLE RISK
2022-03-06 CVE-2021-46704 OS Command Injection vulnerability in Genieacs
In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts).
network
low complexity
genieacs CWE-78
critical
9.8