漏洞描述
radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/72612↗www.zerodayinitiative.comhttp://www.zerodayinitiative.com/advisories/ZDI-15-038/↗support.accelerite.comhttps://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features↗osvdb.orghttp://osvdb.org/show/osvdb/118382↗packetstormsecurity.comhttp://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html↗