Command Injection Vulnerability in WG-C10 from Sony

CVE-2017-2275

What is CVE-2017-2275?

The WG-C10 device, versions 3.0.79 and below, is susceptible to a command injection vulnerability that allows attackers to execute arbitrary operating system commands through various undefined vectors. This flaw can lead to unauthorized access and control over the device, potentially compromising sensitive data and user privacy. It is critical for users of affected versions to implement necessary security measures and apply any available updates to mitigate the risk.

References