Mercury Router Command Injection (CVE-2020-22724)

A command injection vulnerability exists in Mercury Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-22724

A remote command execution vulnerability exists in addserverservice of PPTPSERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1...

CVE-2020-22724

Mercury Router MER1200 v1.0.1 and MER1200G v1.0.1 expose a remote command execution via the PPTP_SERVER add_server_service component. Multiple sources (NVD/NVD-derived entries, CNNVD, PT Security) describe a command-injection flaw in add_server_service of PPTP_SERVER that allows arbitrary command...