CVE-2017-7318 Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as....
CriticalCVSS 9.8
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siklu etherhaul firmware | <= 7.3.0 | No fix listed |
References
- blog.iancaling.com exploit third-party-advisory
- 97227 third-party-advisory vdb-entry