3 matches found
CVE-2017-11322
The CVE-2017-11322 issue affects UCOPIA Wireless Appliance prior to 5.1.8, where the chroothole_client executable accepts parameters that can be exploited with a dollar sign ($) metacharacter to achieve root privileges. The vulnerability is tied to the chroothole_client argument handling, enablin...
CVE-2020-25036
CVE-2020-25036 affects UCOPIA Wi‑Fi appliances 6.0.5. An authenticated attacker can escape the restricted administration shell (CLI) and obtain a shell with admin rights via an unprotected less command. The available documents do not specify a patch/version to remediate or details about in‑the‑wi...
CVE-2020-25037
CVE-2020-25037 affects UCOPIA Wi‑Fi appliances 6.0.5, where an escape from a restricted command allows arbitrary code execution with admin privileges. The underlying cause is a command‑injection style path enabling elevation to admin level. Exploitation status is not detailed in the provided docu...