Aishida Call Center System Command Injection Vulnerability
Vulnerability
A critical command injection vulnerability has been identified in the Aishida Call Center System, affecting versions prior to 20250314. The issue arises from an unspecified processing in the file '/doscall/weixin/open/amr2mp3', where manipulation of the 'File' argument can lead to command injection. This vulnerability can be exploited remotely.
Impact
Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the server running the Aishida Call Center System.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.