CVE-2018-16752 LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the de...
HighCVSS 8.8
EPSS 42.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linknet-usa lw-n605r firmware | = 12.20.2.1486 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 45351 exploit third-party-advisory vdb-entry