description: Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges.
problem types: Unauthenticated OS Command Injection
affected:
{
product: Druva inSync Windows Client
vendor: n/a
versions:
status: affected, version: 6.5.0
}