Security Advisory
CVE-2023-3991
10
CRITICAL
Vulnerability Description
An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
Published Date
October 16, 2023
Official Source
NIST NVD Advisory