CVE-2011-5010

apps/a3/cfgethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action...

CVE-2011-5010

The Ctek SkyRouter 4200 and 4300 series routers are vulnerable to a remote arbitrary command execution flaw in the apps/a3/cfg_ethping.cgi component. The root cause is a failure to adequately sanitize user-supplied input, specifically allowing shell metacharacters in the PINGADDRESS parameter dur...

CVE-2011-5010

creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18172 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/ctekskyrouter.rb 2025-02-06 03:13:40+00:00| seen|...

CTEK SkyRouter 4200 and 4300 Command Execution

This module exploits an unauthenticated remote root exploit within ctek SkyRouter 4200 and 4300. Module Options msf use exploit/unix/http/ctek/skyrouter msf undefinedskyrouter show actions ...actions... msf undefinedskyrouter set ACTION msf undefinedskyrouter show options ...show and set options...