Command injection

2019-06-1119:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate parameter verification, unauthorized users can take advantage of this vulnerability to control the user terminal system.

CPENameOperatorVersion
wf820\\+_lte_outdoor_cpe_firmwareeq< 1.0.0b6

CPE	Name	Operator	Version
	wf820\\+_lte_outdoor_cpe_firmware	eq	< 1.0.0b6

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662