Two new vulnerabilities exist in GoAhead web server software, a tiny application widely embedded in Internet-connected devices. One of the two vulnerabilities is a critical code execution flaw that can be exploited by attackers to execute malicious code on vulnerable devices. The other is a denial-of-service attack that can lead to an infinite loop in the process. Both vulnerabilities are not necessary that all embedded devices running the vulnerable versions of the software could be exploited, say researchers at Cisco Talos. The vendor has released security patches two weeks ago.
Source: https://thehackernews.com/2019/12/goahead-web-server-hacking.html