Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) Remote Root
Posted by deepcore on July 22, 2022 – 6:06 pm
Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) versions 1.31.460 and below suffer from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands as the root user via the name GET parameter in delsnap.pl Perl/CGI script which is used for deleting snapshots taken from the webcam.
Post a reply
You must be logged in to post a comment.