The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code; read, modify, or create files; or obtain file metadata. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
RCE
Code Injection
Udr
Rtu Firmware
Sixnet
NVD
CVSS 2.0
10.0
EPSS
4.1%