CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at…

published September 20, 2018

CVSS

—

EPSS

43%

Percentile

98.7

In the wild

Unconfirmed

What it is

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.42657 · 98.7th percentile
Published: 2018-09-20T20:00Z

EPSS history

Timeline

20 SEP 20:00Z
LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at…
cvelistv5