CVE-2017-12573

HIGH

8.8

CVSS Severity Score

EPSS Score0.0490%

EPSS Percentile35.02th

Published2018年8月24日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack.

Affected Platforms (CPE)

💻

Planex

Cs W50hd Firmware

< 030720

References & Advisories

🔗 http://seclists.org/fulldisclosure/2018/Aug/29

Vulnerability Description

Affected Platforms (CPE)

Cs W50hd Firmware

References & Advisories

関連する脆弱性情報