CVE-2012-2321: Connman

High severity, CVSS 10.0. EPSS: 5.6% chance of exploitation in the next 30 days.

The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.

Affected products

• Connman Connman: up to and including 0.84; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2012-05-18. Last modified 2026-06-16.