Ews356-fit Firmware vulnerabilities
1 known vulnerability in Ews356-fit Firmware from Engeniustech. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
ews356_fit: Improper Neutralization of Special Elements used in an OS Command
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters to the Ping and Speed Test utilities.