PT-2018-13720
CVE-2018-16752
·
تاريخ النشر
2018-09-20
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
LINK-NET LW-N605R version 12.20.2.1486
Description
The issue allows for remote code execution via shell metacharacters in the HOST field of the ping feature at "adm/systools.asp". Authentication is required, but the default password for the admin account may be used in some cases.
Recommendations
For version 12.20.2.1486, consider changing the default password for the admin account and avoid using shell metacharacters in the HOST field of the ping feature at "adm/systools.asp" to minimize the risk of exploitation. As a temporary workaround, restrict access to the "adm/systools.asp" page until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾