A vulnerability identified as critical has been detected in Endian Firewall 3.3.25. This affects the function Open of the file /cgi-bin/logs_openvpn.cgi of the component Regular Expression Handler. This manipulation of the argument Date causes os command injection.
| Vendor | Product | Versions |
|---|---|---|
| endian | endian firewall | 3.3.25 |
Updated severity to CRITICAL, marked as actively exploited, and provided a more detailed description of the vulnerability.
Initial creation
