{"cvss":0.0,"datePublished":"2019-06-18T00:00:00Z","dateUpdated":"2019-06-18T00:00:00Z","description":"Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018.","dueDate":"","id":"CVE-2018-18852","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"dt-300n_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"cerio dt-300n_firmware Improper Neutralization of Special Elements used in an OS Command","vendor":"cerio"}