description: An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
problem types: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN A COMMAND ('COMMAND INJECTION') CWE-77
affected:
{
product: CX-Supervisor
vendor: ICS-CERT
versions:
status: affected, version: Versions 3.42 and prior
}