PT-2018-17523
CVE-2018-6388
·
Publicado
2018-01-29
·
Atualizado
2018-02-15
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
iBall iB-WRA150N version 1.2.6 build 110401 Rel.47776n
Description
The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the
ping test arguments on the "Diagnostics" page.Recommendations
For iBall iB-WRA150N version 1.2.6 build 110401 Rel.47776n, as a temporary workaround, consider restricting access to the Diagnostics page until a patch is available. Avoid using shell metacharacters in the ping test arguments to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾