A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to execute arbitrary commands in Moxa’s VPort 461 Series Industrial Video Servers.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23639
Reference (s):
- https://www.moxa.com/en/support/support/security-advisory/vport-461-series-industrial-video-servers-vulnerabilities