GHSA-pxc4-295p-35qqHighCVSS 7.2

Post-authentication improper control of generation of code ('Code Injection') vulnerability has...

Published
July 14, 2026
Last Modified
July 14, 2026

🔗 CVE IDs covered (1)

📋 Description

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

🔗 References (4)