Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-20122
HistoryOct 11, 2021 - 5:15 p.m.

Command injection

2021-10-1117:15:00
PRIOn knowledge base
www.prio-n.com
6

8.7 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router’s LAN and authenticated with a super user account, or using a bypass authentication vulnerability like CVE-2021-20090 could leverage this issue to run commands or gain a shell as root on the target device.

CPENameOperatorVersion
prv65b444a-s-ts_firmwareeq3.00.20