Victure WR1200 WiFi Router Command Injection (CVE-2021-43283)

A command injection vulnerability exists in Victure WR1200 WiFi Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-43283

creationtimestamp| type| source ---|---|--- 2021-11-30 22:34:44+00:00| seen| https://t.me/cibsecurity/33135...

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

CVE-2021-43283

The CVE-2021-43283 entry concerns Victure WR1200 routers (firmware 1.0.3 and earlier). The issue is a command-injection vulnerability in the device’s web interface, specifically in the ping and traceroute features. When an attacker has valid credentials, they can inject arbitrary shell commands t...