CyberRota Analysis
AI-GeneratedNetcore NR255-V version 1.5.130703 is vulnerable to an OS command argument injection flaw in its tcpdump launch paths, allowing attackers to inject malicious arguments that can manipulate system commands executed on the device. This high-severity vulnerability poses a significant risk to the integrity and security of affected systems. Organizations using this version of the Netcore NR255-V should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. Attackers can inject crafted arguments into these tcpdump launch routines to manipulate executed system commands on the device.