Lucene search

K
cvelistMitreCVELIST:CVE-2020-24365
HistorySep 24, 2020 - 2:17 p.m.

CVE-2020-24365

2020-09-2414:17:54
mitre
www.cve.org
4
gemtek wrtm-127acn
wrtm-127x9
authenticated attacker
execute command
root user
network page
default credentials

AI Score

8.8

Confidence

High

EPSS

0.046

Percentile

92.7%

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)

AI Score

8.8

Confidence

High

EPSS

0.046

Percentile

92.7%