Design/Logic Flaw

2020-03-0919:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.069 Low

EPSS

Percentile

93.9%

BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.

CPENameOperatorVersion
direx-pro_firmwareeq1.2181

CPE	Name	Operator	Version
	direx-pro_firmware	eq	1.2181

References

sku11army.blogspot.com/2020/03/bwa-multiple-vulnerabilities-in-direx.html