NuytsTech Security

CVE-2018-16752

by ·

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.

Date published : 2018-09-20

https://www.exploit-db.com/exploits/45351/

http://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.html

Tags: