4 matches found
CVE-2018-15887
MainAnalysisContent.asp in ASUS DSL-N12EC1 1.1.2.3345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execute arbitrary OS commands via service parameters, such as shell metacharacters in the destIP parameter of a cmdMethod=ping request...
CVE-2018-15887
MainAnalysisContent.asp in ASUS DSL-N12EC1 1.1.2.3345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execute arbitrary OS commands via service parameters, such as shell metacharacters in the destIP parameter of a cmdMethod=ping request...
PT-2018-13271
Name of the Vulnerable Software and Affected Versions ASUS DSL-N12E C1 version 1.1.2.3 345 Description The issue allows a remote attacker to execute arbitrary OS commands via service parameters. This can be achieved by using shell metacharacters in the destIP parameter of a cmdMethod=ping request...
CVE-2018-15887: Improper Neutralization of Special Elements used in an OS Command
MainAnalysisContent.asp in ASUS DSL-N12EC1 1.1.2.3345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execute arbitrary OS commands via service parameters, such as shell metacharacters in the destIP parameter of a cmdMethod=ping request...