← Back
CVE-2022-27224
InformationalDescription
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected (Ping, Traceroute, and DNS Lookup) and their respective input fields (ping_address, trace_address, nslookup_address).
Scores & Signals
| CVSS 3.1 | 7.2 — HIGH |
| EPSS score | 0.1194 (93.8th percentile) |
| CISA KEV | No |
| Affected | Galsys Nts-6002-Gps Firmware |
| Published | 2022-05-09 |
Sources
- CVE-2022-27224 nvd — 2022-05-09