Volerion logoVolerion
Volerion logoVolerion

Endian Firewall Command Injection Vulnerability in ClamAV Logs CGI

Vulnerability

A command injection vulnerability has been identified in Endian Firewall versions through 3.3.25. This issue allows authenticated users to execute arbitrary operating system commands by manipulating the DATE parameter in the /cgi-bin/logs_clamav.cgi script. The vulnerability arises from inadequate regular expression validation, which enables the crafted DATE parameter value to be used in a file path that is passed to a Perl open() function call.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected system.

Added: Apr 2, 2026, 5:24 PM
Updated: Apr 2, 2026, 5:24 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
4.9
remediation
0.0
relevance
4.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.