CVE-2018-11240

Name of the Vulnerable Software and Affected Versions SoftCase T-Router build 20112017

Description An issue was discovered where there are no restrictions on the 'exec command' feature of the T-Router protocol. If the command syntax is correct, this allows code execution both on the other modem and on the main servers.

Recommendations For SoftCase T-Router build 20112017, update to a production build from Spring 2018 or later to resolve the issue. As a temporary workaround, consider restricting access to the 'exec command' feature to minimize the risk of exploitation.