Command injection

2022-03-2617:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.

CPENameOperatorVersion
r8500_firmwareeq1.0.2.158

CPE	Name	Operator	Version
	r8500_firmware	eq	1.0.2.158

References

github.com/donothingme/VUL/blob/main/vul3/3.md