CVE-2018-17431 – Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution

https://notcve.org/view.php?id=CVE-2018-17431

29 Jan 2019 — Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. La consola web en Comodo UTM Firewall, en versiones anteriores a la 2.7.0, permite a los atacantes remotos ejecutar código arbitrario sin autenticarse mediante una URL manipulada. Comodo Unified Threat Management Web Console version 2.7.0 suffers from a remote code execution vulnerability. • https://packetstorm.news/files/id/159246 • CWE-287: Improper Authentication •