RCE in Bittorrent Sync

CVE-2015-2846

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.

Affected products

Bittorrent Sync
N/a — versions n/a

Weakness classification (CWE)

CWE-77 — Command Injection

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC)