IceWarp Command Injection Vulnerability Leading to Remote Code Execution

A remote code execution vulnerability has been identified in IceWarp 14, specifically within the handling of the X-File-Operation header. This issue arises from inadequate validation of user-supplied strings before they are used to execute system calls. As a result, remote attackers can execute arbitrary code on the affected system, with the executed code running in the context of the SYSTEM user. Notably, this vulnerability can be exploited without authentication.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running under the SYSTEM context.

Remediation

IceWarp has released an update to address this vulnerability. Users can refer to the IceWarp support page for details on the update.