← back
CVE-2018-6940

CVE-2018-6940

EPSS 2.9%
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSRF.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/146373/NAT32-Build-22284-Remote-Command-Execution.htmlunverifiedcve_referencewww.exploit-db.com/exploits/44033/unverifiedexploitdbwww.exploit-db.com/exploits/44033unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CVE-2018-6940.txthttp://packetstormsecurity.com/files/146373/NAT32-Build-22284-Remote-Command-Execution.htmlhttps://www.exploit-db.com/exploits/44033/http://www.securityfocus.com/archive/1/541777/100/0/threaded