GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-01
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-3728
http://www.zerodayinitiative.com/advisories/ZDI-14-136/