https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 19:49:57 +0000 https://cve.radiocsirt.org/vuln/cve-2020-27542 <p>Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP configuration from QR code is copied to the file /config/ip-static and after reboot data from this file is inserted into bash command (without any escaping). So bash injection is possible. Camera doesn&#39;t parse QR codes if it&#39;s already successfully configured. Camera is always rebooted after successful configuration via QR code.</p> <p>Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP configuration from QR code is copied to the file /config/ip-static and after reboot data from this file is inserted into bash command (without any escaping). So bash injection is possible. Camera doesn&#39;t parse QR codes if it&#39;s already successfully configured. Camera is always rebooted after successful configuration via QR code.</p> https://cve.radiocsirt.org/vuln/cve-2020-27542