PT-2020-15709

Name of the Vulnerable Software and Affected Versions Gemtek WRTM-127ACN version 01.01.02.141 Gemtek WRTM-127x9 version 01.01.02.127 Description An issue allows an authenticated attacker to execute a command directly on the target machine via the Monitor Diagnostic network page. Commands are...

CVE-2020-24365: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...