CVE-2022-44038

Remote Command Execution | Russound XSourcePlayer-777D
CVE ID: CVE-2022-44038
CVE Author: Momen Eldawakhly (Cyber Guy)
Vendor: Russound
Product: XSourcePlayer-777D
Affected Versions: v06.08.03
Description:
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.
PoC Image: