CVE-2013-10049 | Raidsonic IB-NAS5220/IB-NAS4220 Web Interface timeHandler.cgi timeZone os command injection (EDB-24499)

A vulnerability, which was classified as critical, has been found in Raidsonic IB-NAS5220 and IB-NAS4220. Affected by this issue is some unknown functionality of the file timeHandler.cgi of the component Web Interface. The manipulation of the argument timeZone leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is handled as CVE-2013-10049. The attack may be launched remotely. Furthermore, there is an exploit available.