CVE-2019-17499

The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which…

published October 11, 2019

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03237 · 88.2th percentile
Published
2019-10-11T10:05Z
EPSS history
Timeline
  • 11 OCT 10:05Z
    The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which…
    cvelistv5