html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the scan functionality in the System / NeDi menu.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Groundwork_monitor | Gwos | 6.7.0 (including) | 6.7.0 (including) |