Uniguest Tripleplay Unauthenticated Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Uniguest Tripleplay versions prior to 24.2.1. This vulnerability allows remote attackers to execute arbitrary code by sending a specially crafted HTTP POST request. The issue arises from inadequate input validation and insufficient sanitization of user-supplied data.

Impact

Exploitation of this vulnerability allows for unauthenticated remote code execution on the affected server.

Remediation

Users are advised to upgrade to Tripleplay versions 24.2.1, 24.1.2, or a later release that includes the fix for this vulnerability. All remediation options require package installation by a trained Uniguest Support Engineer or Technical Services Engineer. Please contact your technical account representative or email support@tripleplay.tv to arrange an upgrade.