CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.
References
Configurations

Configuration 1


Information

Published : 2018-09-20 08:29

Updated : 2019-10-03 12:03


NVD link : CVE-2018-16752

Mitre link : CVE-2018-16752

Products Affected
No products.
CWE
CWE-1188

Insecure Default Initialization of Resource

CWE-78