Intrusion Prevention

Netsys.systemTool.Multiple.Remote.Command.Execution

Description

This indicates a detection of Multiple Command Injection vulnerability in Netsys Products.
The vulnerability is due to lack of sanitization in the application when handling a crafted HTTP request. It may allow remote attackers to execute arbitrary command on vulnerable systems, via a crafted HTTP request.

Affected Products

Netsys devices

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

We currently are unaware of any vendor supplied patches or updates available for this issue.