CVE-2020-23584

CVE-2020-23584 OPTILINK E-PON "모델 번호: OP-XT71000N"에 "하드웨어 버전: V2.2" 및 "펌웨어 버전: OPV3.3.1-191028" "OPTILINK OP-XT71000N, 하드웨어 버전: V2.2"에서 인증되지 않은 원격 코드 실행이 발생합니다. 문제는 공격자가 IP 주소와 함께 "|"를 사용하여 임의의 명령을 전달할 때 발생합니다. 이 명령은 "/diagtracertadmin.asp"의 "PingTest" 매개변수에서 실행되며 명령 실행으로 이어집니다. 대상...

CVE-2020-23584

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...

Remote code execution

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...

CVE-2020-23584

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...

Optilink Network OP-XT71000N 命令注入漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. The Optilink Network OP-XT71000N version V2.2 suffers from a command injection vulnerability that originates from an attacker executing the "PingTest" parameter "/diagtracertadmin.admin" with "|" via an arbitrary...

iWT FaceSentry Access Control System 操作系统命令注入漏洞

iWT FaceSentry Access Control System is an iWT open source application. It provides an access control function. iWT FaceSentry Access Control System 6.4.8 suffers from an operating system command injection vulnerability that allows injection of authenticated OS commands using default credentials...