EUVD-2019-7618

Malware in sbrugna...

CVE-2019-17186

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...

CVE-2019-17187

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...

CVE-2019-17186

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...

CVE-2019-17186

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...

Remote code execution

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...

CVE-2019-17187

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...

CVE-2019-17187

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...

CVE-2019-17187

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...

CVE-2019-17187

CVE-2019-17187 affects FiberHome HG2201T devices (version 1.00.M5007_JS_201804) via pre-authentication Directory Traversal in /var/WEB-GUI/cgi-bin/downloadfile.cgi, enabling reading arbitrary files. The connected sources corroborate the path and device context but do not provide a public patch or...

CVE-2019-17187: Improper Limitation of a Pathname to a Restricted Directory

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...

CVE-2019-17186: Missing Authentication for Critical Function

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...

PT-2019-14991

Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows pre-authentication Directory Traversal for reading arbitrary files via the /var/WEB-GUI/cgi-bin/downloadfile.cgi API endpoint. Recommendations For FiberHome HG2201T...

PT-2019-14990

Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows for pre-authentication remote code execution on the /var/WEB-GUI/cgi-bin/telnet.cgi endpoint. Recommendations For FiberHome HG2201T version 1.00.M5007 JS 201804, as a...