PT-2019-8698

CVE-2018-0677

·

Published

2019-01-09

·

Updated

2019-02-11

Description by

CVSS 2.0
7.7
High
MetricsAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions BN-SDWBP3 firmware versions 1.0.9 and earlier
Description The issue allows an attacker with administrator rights on the same network segment to execute arbitrary OS commands. The exact vectors used for this exploitation are not specified.
Recommendations For BN-SDWBP3 firmware versions 1.0.9 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
Related identifiers
CVE-2018-0677
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com