Flow Control Router vulnerabilities
1 known vulnerability in Flow Control Router from BYTEVALUE (Luoyang Baiwei Intelligent Technology Co., Ltd.). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
Flow Control Router: Improper Neutralization of Special Elements used in an OS Command
BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoint. The `path` parameter is not properly validated and is echoed into a shell context, allowing an attacker to inject and execute arbitrary