A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command.
| Software | From | Fixed in |
|---|---|---|
| mbconnectline / mbnet.mini_firmware | - | 2.3.3 |