Binardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection Vulnerability

A command injection vulnerability has been identified in the Binardat 10G08-0800GSM network switch, affecting firmware versions through V300SP10260209. The vulnerability resides in the traceroute diagnostic function within the device's web management interface. An authenticated attacker with access to the web interface can exploit this issue by injecting the %1a character into the hostname parameter, allowing the execution of arbitrary CLI commands on the device.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected network switch via the command line interface.