CVE-2017-14127

The Technicolor TD5336 router, running OI_Fw_v7 firmware, is susceptible to a Command Injection vulnerability in the Ping Module of its web interface. The root cause is the failure to neutralize special shell metacharacters within the pingAddr parameter sent to the mnt_ping.cgi file. A remote att...