CVE-2015-9059

Critical

Published: 28/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized command execution on the system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade picocom to version 2.0 or later to mitigate this vulnerability.

Original NVD description (English source)

picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.