Secudos · Secudos Domos · CVE-2020-14293
**Name of the Vulnerable Software and Affected Versions**
Secudos DOMOS version 5.8
**Description**
The issue allows remote attackers to execute arbitrary commands as root via shell metacharacters in the `zone` field, which can be obtained from the web interface. This is related to the `conf datetime` in Secudos DOMOS.
**Recommendations**
For Secudos DOMOS version 5.8, consider restricting access to the web interface to minimize the risk of exploitation, and avoid using shell metacharacters in the `zone` field until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.