GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-01
http://www.zerodayinitiative.com/advisories/ZDI-14-136/