CVE-2017-7175

Critical

Published: 10/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the 'Custom output format' field).

Risk Assessment

An attacker could exploit this vulnerability to gain control over the system, posing a significant security risk to the organization.

Recommendation

It is recommended to upgrade NfSen to version 1.3.8 or later to mitigate this vulnerability.

Original NVD description (English source)

NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format" field).