Lucene search

[email protected]CVE-2016-10760

HistoryJun 11, 2019 - 9:29 p.m.

CVE-2016-10760

2019-06-1121:29:00

CWE-77

[email protected]

web.nvd.nist.gov

cve-2016-10760

seowon intech

routers

command injection

diagnostic.cgi

ping_ipaddr

shell metacharacters

vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.142 Low

EPSS

Percentile

95.7%

JSON

On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the ping_ipaddr parameter.

CPENameOperatorVersion
seowonintech:swr-300a_firmwareseowonintech swr-300a firmwareeq-
seowonintech:swr-300b_firmwareseowonintech swr-300b firmwareeq-
seowonintech:swr-300c_firmwareseowonintech swr-300c firmwareeq-
seowonintech:swr-300bg_firmwareseowonintech swr-300bg firmwareeq-

CPE	Name	Operator	Version
seowonintech:swr-300a_firmware	seowonintech swr-300a firmware	eq	-
seowonintech:swr-300b_firmware	seowonintech swr-300b firmware	eq	-
seowonintech:swr-300c_firmware	seowonintech swr-300c firmware	eq	-
seowonintech:swr-300bg_firmware	seowonintech swr-300bg firmware	eq	-

References

ethical-hacker.org/en/seowonintech-remote-root/

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.142 Low

EPSS

Percentile

95.7%

JSON

Related for CVE-2016-10760

prion1 cvelist1