Pingtools Network Utilities
Monthly
Command injection in PingTools Network Utilities 4.64 Free allows a local user who can set or influence the Host field of a Watcher ICMP service to run arbitrary commands through sh -c, compromising confidentiality, integrity, and availability. The assessed vector is AV:L, so this is a local-device issue requiring access to the app and configuration or triggering of the Watcher ICMP feature, not an internet-facing remote attack. No public exploit code or CISA KEV entry was identified in the provided data.
Command injection in PingTools Network Utilities 4.64 Free allows a local user who can set or influence the Host field of a Watcher ICMP service to run arbitrary commands through sh -c, compromising confidentiality, integrity, and availability. The assessed vector is AV:L, so this is a local-device issue requiring access to the app and configuration or triggering of the Watcher ICMP feature, not an internet-facing remote attack. No public exploit code or CISA KEV entry was identified in the provided data.