RCE in Restorepoint

CVE-2011-4201

remote_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) pid1 or (2) pid2 parameter in a stop_remote_support action.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.