HCL Technologies BigFix Mobile Command Injection Vulnerability

HCL Technologies BigFix Mobile is a Mobile Device Management (MDM) solution from HCL Technologies. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. HCL Technologies BigFix Mobile suffers from a command injection vulnerability that stems from the application failing to properly filter construct command special characters, commands, etc. An attacker can exploit the vulnerability to run arbitrary shell commands on the WebUI server.