PT-2011-5165

CVE-2011-5010

·

Published

2011-12-25

·

Updated

2012-02-17

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Ctek SkyRouter versions 4200 and 4300
Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action in the apps/a3/cfg ethping.cgi endpoint.
Recommendations For Ctek SkyRouter versions 4200 and 4300, avoid using the PINGADDRESS parameter in the affected endpoint until the issue is resolved. Restrict access to the cfg ethping.cgi endpoint to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2011-5010
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com