Lucene search
PRIOn knowledge basePRION:CVE-2017-18378HistoryJun 11, 2019 - 9:29 p.m.
Command injection
2019-06-1121:29:00
PRIOn knowledge base
www.prio-n.com
2
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET[‘uploaddir’] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| readynas_surveillance_firmware | eq | < 1.1.4-7 | |
| readynas_surveillance_firmware | eq | < 1.4.3-17 |
Related
cve
cve
CVE-2017-18378
2019-06-11 21:29:00
cvelist
cvelist
CVE-2017-18378
2019-06-11 20:44:55
nvd
nvd
CVE-2017-18378
2019-06-11 21:29:00