Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
802
VMScore

CVE-2018-16752

Published: 20/09/2018 Updated: 03/10/2019
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 802
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Subscribe to Linknet-usa

Vulnerability Summary

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linknet-usa lw-n605r_firmware 12.20.2.1486

Exploits

Exploit DB: LW-N605R Remote Code Execution
LW-N605R devices allow remote code execution via shell metacharacters in the HOST field of the ping feature at adm/systoolsasp Authentication is needed but the default password of admin for the admin account may be used in some cases ...

References

CWE-78CWE-1188https://www.exploit-db.com/exploits/45351/http://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.htmlhttps://nvd.nist.govhttps://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.html
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook