Lucene search

CVE-2018-17867

🗓️ 01 Oct 2018 23:00:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 26 Views🌐 WEB

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2018-17867	1 Oct 201823:00	–	cvelist
NVD	CVE-2018-17867	1 Oct 201823:29	–	nvd
Prion	Design/Logic Flaw	1 Oct 201823:29	–	prion

Nvd

Node

dasannetworks h660gw_firmwareMatch-

AND

dasannetworks h660gwMatch-

Source	Link
wojciechregula	www.wojciechregula.blog/authenticated-rce-in-dasan-routers/

Parameter	Position	Path	Description	CWE
Addr	query param	/cgi-bin/adv_nat_virsvr.asp	The Addr parameter in the cgi-bin/adv_nat_virsvr.asp endpoint is vulnerable to arbitrary code execution due to improper handling of shell metacharacters.	CWE-78

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Oct 2018 23:29Current

7.5High risk

Vulners AI Score7.5

CVSS29

CVSS37.2

EPSS0.00533

CWE-78