CVE-2017-12576

An issue was discovered on the PLANEX CS-QR20 1.30

published August 24, 2018

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can execute any command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02198 · 82.4th percentile
Published
2018-08-24T19:00Z
EPSS history
Timeline
  • 24 AUG 19:00Z
    An issue was discovered on the PLANEX CS-QR20 1.30
    cvelistv5