Lucene search
PRIOn knowledge basePRION:CVE-2023-27380HistoryOct 11, 2023 - 4:15 p.m.
Command injection
2023-10-1116:15:00
PRIOn knowledge base
www.prio-n.com
6
os command injection
admin.cgi
ussd_send
peplink surf soho hw1
qemu
http request
command execution
authenticated
An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| surf_soho_firmware | eq | 6.3.5 |
Related
cve
cve
CVE-2023-27380
2023-10-11 16:15:12
cvelist
cvelist
CVE-2023-27380
2023-10-11 15:16:56
nvd
nvd
CVE-2023-27380
2023-10-11 16:15:12
talos
talos
peplink Surf SOHO HW1 admin.cgi USSD_send OS command injection vulnerability
2023-10-11 00:00:00
talosblog
talosblog