EndRun Technologies Sonoma D12 Network Time Server OS Command Injection Vulnerability

A command injection vulnerability allowing remote code execution has been identified in the EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware version 6010-0071-000 v4.00. This vulnerability could enable attackers to execute arbitrary commands on the server, potentially leading to unauthorized access or manipulation of the system.

Impact

Exploitation of this vulnerability allows for unauthorized remote code execution, privilege escalation, and full system compromise.

Remediation

The vendor has provided interim mitigation steps to disable web management access until an official patch is available. These steps involve changing the permissions of the httpd management script and rebooting the server. However, this should be validated in a controlled environment before applying in production.