CVE-2011-5010

EPSS 66.4%

apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18172unverified exploitdbwww.exploit-db.com/exploits/18172unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://dev.metasploit.com/redmine/issues/5610 http://osvdb.org/77497 http://secunia.com/advisories/47003 http://www.exploit-db.com/exploits/18172 http://www.securityfocus.com/bid/50867