CVE-2019-12489

An issue was discovered on Fastweb Askey RTV1907VW 0.00.81FW200Askey 2018-10-02 18:08:18 devices. By using the usbremove service through an HTTP request, it is possible to inject and execute a command between two & characters in the mount parameter...

Command injection

An issue was discovered on Fastweb Askey RTV1907VW 0.00.81FW200Askey 2018-10-02 18:08:18 devices. By using the usbremove service through an HTTP request, it is possible to inject and execute a command between two & characters in the mount parameter...

CVE-2019-12489: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Fastweb Askey RTV1907VW 0.00.81FW200Askey 2018-10-02 18:08:18 devices. By using the usbremove service through an HTTP request, it is possible to inject and execute a command between two & characters in the mount parameter...

PT-2019-12819

Name of the Vulnerable Software and Affected Versions Fastweb Askey RTV1907VW version 0.00.81 FW 200 Askey Description An issue was discovered that allows command injection and execution through the usb remove service using an HTTP request. Specifically, it is possible to inject and execute a...