Frauscher FDS Command Injection Vulnerability Allowing Full Control of Affected Devices

A command injection vulnerability has been identified in Frauscher products FDS101, FDS-SNMP101, and FDS102 (for FAdC/FAdCi R2 and all previous versions). This vulnerability allows a remote attacker with an administrator account to gain full control of the device by exploiting improper handling of special characters during the upload of configuration files via the web interface.

Impact

Exploitation of this vulnerability allows for full control over the affected device.

Remediation

Users are advised to update FDS102 to version 2.13.3. For FDS101 and FDS-SNMP101, ensure that only authorized personnel have access to the system.