Gemtek WRTM-127ACN Command Injection (CVE-2020-24365)

A command injection vulnerability exists in Gemtek WRTM-127ACN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-24365

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

CVE-2020-24365

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

CVE-2020-24365

CVE-2020-24365 affects Gemtek WRTM-127ACN (01.01.02.141) and WRTM-127x9 (01.01.02.127). The issue, described across NVD and vendor-containing advisories, is a command-injection vulnerability on the Monitor Diagnostic page. An authenticated attacker can execute arbitrary commands on the target dev...

CVE-2020-24365: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

PT-2020-15709

Name of the Vulnerable Software and Affected Versions Gemtek WRTM-127ACN version 01.01.02.141 Gemtek WRTM-127x9 version 01.01.02.127 Description An issue allows an authenticated attacker to execute a command directly on the target machine via the Monitor Diagnostic network page. Commands are...