CVE-2020-21883

2021-04-0912:19:12

mitre

www.cve.org

unibox

u-50

enterprise series

campus series

os command injection

/tools/ping

device takeover

AI Score

8.8

Confidence

High

EPSS

0.056

Percentile

93.4%

JSON

Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover.

References

wifi-soft.com

s3curityb3ast.github.io/KSA-Dev-009.txt

www.mail-archive.com/fulldisclosure%40seclists.org/msg07140.html