PT-2018-17523
CVE-2018-6388
·
تاريخ النشر
2018-01-29
·
تاريخ التحديث
2018-02-15
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
iBall iB-WRA150N version 1.2.6 build 110401 Rel.47776n
Description
The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the
ping test arguments on the "Diagnostics" page.Recommendations
For iBall iB-WRA150N version 1.2.6 build 110401 Rel.47776n, as a temporary workaround, consider restricting access to the Diagnostics page until a patch is available. Avoid using shell metacharacters in the ping test arguments to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾