description: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.
problem types: CWE-78 - Improper Neutralization of Special Elements used in an OS Command
affected:
{
vendor: n/a
product: ALEOS
versions:
version: all versions before 4.16, status: affected
}