Description
During the scan, Kayran managed to find a Remote Code Execution vulnerability.
Remote Code Execution is a vulnerability that allows a potential attacker to remotely execute commands.
An RCE vulnerability can lead to losing control over the system or its individual components, as well as the theft of sensitive data.
An attacker could exploit this vulnerability to execute any code of his choice on a remote machine via the Internet. An attacker could gain full access and control over the servers and could seriously harm your asset.
In order to reduce the number of Remote Code Execution vulnerabilities in your environment, it’s recommended to patch and update all of your software. Attackers almost always hold a list of the most recently known vulnerabilities and would happily exploit them.
Recommendation
To prevent this vulnerability, make sure that the end-user does not have the option to write directly to the system.
Such as : writing to files/terminals, etc. In addition, make sure that inputs from the user are being checked and verified in order to rule out the option that it would be malicious code.
