[0day-rubbish] Minuteman UPS Network Management Card 1.60.3 Unauthenticated OS command injection to root RCE (9.8)

<p>Posted by disclosure via Fulldisclosure on Sep 03</p>0day Rubbish Research Team is publicly disclosing a vulnerability in Minuteman UPS Network Management Card 1.60.3.<br /> <br /> Type: Unauthenticated OS command injection to root RCE (CWE-78)<br /> CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)<br /> Impact: Root command execution on the UPS/PDU power-management card: power telemetr