An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker to achieve remote code execution on the system by
supplying a crafted firmware update file via the firmware update route.
Affected Platforms
Copeland Xweb 500B ProCopeland Xweb 300D Pro FirmwareCopeland Xweb 500D ProCopeland Xweb 500D Pro FirmwareCopeland Xweb 300D ProCopeland Xweb 500B Pro Firmware