Lucene search
HistoryDec 25, 2011 - 1:55 a.m.
CVE-2011-5010
cve-2011-5010
ctek skyrouter
remote code execution
shell metacharacters
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.824 High
EPSS
Percentile
98.4%
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a “u” action.
Affected configurations
Node
ctekproductsskyrouterMatch4200
ORctekproductsskyrouterMatch4300
| CPE | Name | Operator | Version |
|---|---|---|---|
| ctekproducts:skyrouter | ctekproducts skyrouter | eq | 4200 |
| ctekproducts:skyrouter | ctekproducts skyrouter | eq | 4300 |
Related
openvas
openvas
cvelist
cvelist
CVE-2011-5010
2011-12-25 01:00:00
prion
prion
Deserialization of untrusted data
2011-12-25 01:55:00
nvd
nvd
CVE-2011-5010
2011-12-25 01:55:04
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.824 High
EPSS
Percentile
98.4%
Related for CVE-2011-5010