K2(psg1218) Firmware Security Vulnerabilities

cve

CVE-2019-19117

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.

8.8CVSS

8.6AI Score

0.021EPSS

2019-11-18 10:15 PM