Lucene search
PRIOn knowledge basePRION:CVE-2017-17867HistoryJan 04, 2018 - 7:29 p.m.
Design/Logic Flaw
2018-01-0419:29:00
PRIOn knowledge base
www.prio-n.com
1
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the /etc/uci-defaults directory was not being used to secure the OpenWrt configuration.
Related
zdt
zdt
Iopsys Router - dhcp Remote Code Execution
2018-01-04 00:00:00
cvelist
cvelist
CVE-2017-17867
2018-01-04 19:00:00
packetstorm
packetstorm
Inteno IOPSYS 3.16.4 Root Filesystem Access
2021-01-18 00:00:00
Iopsys Router dhcp Remote Code Execution
2018-01-04 00:00:00
cve
cve
CVE-2017-17867
2018-01-04 19:29:00
exploitdb
exploitdb
Inteno IOPSYS 3.16.4 - root filesystem access via sambashare (Authenticated)
2021-01-18 00:00:00
nvd
nvd
CVE-2017-17867
2018-01-04 19:29:00