RCE in Pineapp Mail-Secure 5099sk

CVE-2013-6830

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.089 (94.7th percentile) — read the EPSS interpretation.

Affected products

Pineapp Mail-secure_5099sk
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)