CVE-2021-20122

2021-10-1116:48:59

tenable

www.cve.org

9 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router’s LAN and authenticated with a super user account, or using a bypass authentication vulnerability like CVE-2021-20090 could leverage this issue to run commands or gain a shell as root on the target device.

CNA Affected

[
  {
    "product": "Telus Wi-Fi Hub (PRV65B444A-S-TS)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "3.00.20"
      }
    ]
  }
]