CVE-2012-10028
NONE—CVSS v3
—CVSS v2
74.26%
EPSS (exploit probability)
CWE-78CWE
Description
Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code execution on the underlying system.
Affected routers (0)
No routers currently mapped to this CVE in our database.