CVE-2020-7842CWE-20

D'live AP command injection vulnerability

Medium · published November 20, 2020

CVSS v3.1
6.4
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01563 · 75.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-11-20T15:30Z
EPSS history
Timeline
  • 20 NOV 15:30Z
    D'live AP command injection vulnerability
    cvelistv5