CVE:CVE-2020-16147
CNNVD:CNNVD-202009-1446
Telmat AccessLog是法国Telmat的一种访问日志监控产品。该产品可以根据访问日志保护公共和专用网络。
Telmat AccessLog 6.0 (TAL_20180415) 版本及之前版本中存在操作系统命令注入漏洞，该漏洞允许攻击者通过未经验证的代码注入通过网络来获取root shell访问。
solution:Upgrade telmat accesslog_firmware to a higher version than 6.0\(tal_20180415\,and avoid the version (,6.0\(tal_20180415\)]; Upgrade telmat educ@box_firmware to a higher version than 6.0\(tal_20180415\,and avoid the version (,6.0\(tal_20180415\)]; Upgrade telmat git@box_firmware to a higher version than 6.0\(tal_20180415\,and avoid the version (,6.0\(tal_20180415\)]