Endian Firewall Command Injection Vulnerability in Logs Firewall CGI

A command injection vulnerability has been identified in Endian Firewall versions through 3.3.25. This issue allows authenticated users to execute arbitrary operating system commands by manipulating the DATE parameter in the /cgi-bin/logs_firewall.cgi script. The vulnerability arises from inadequate regular expression validation, which enables the injection of commands into a file path that is subsequently processed by a Perl open() function call.

Impact

Exploitation of this vulnerability allows for arbitrary operating system command execution on the affected firewall.