Lucene search
HistoryNov 23, 2022 - 2:15 a.m.
CVE-2020-23584
cve-2020-23584
unauthenticated
remote code execution
optilink op-xt71000n
hardware version v2.2
ip-address
pingtest
diag_tracert_admin.asp
command execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.6%
Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in the “PingTest” parameter that leads to command execution.
Affected configurations
Node
optilinknetworkop-xt71000n_firmwareMatch3.3.1-191028
optilinknetworkop-xt71000nMatch2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| optilinknetwork | op-xt71000n_firmware | 3.3.1-191028 | cpe:2.3:o:optilinknetwork:op-xt71000n_firmware:3.3.1-191028:*:*:*:*:*:*:* |
| optilinknetwork | op-xt71000n | 2.2 | cpe:2.3:h:optilinknetwork:op-xt71000n:2.2:*:*:*:*:*:*:* |
Related
prion
prion
Remote code execution
2022-11-23 02:15:00
cvelist
cvelist
CVE-2020-23584
2022-11-23 00:00:00
cve
cve
CVE-2020-23584
2022-11-23 02:15:09
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.6%
Related for NVD:CVE-2020-23584