CVE-2019-11535 in RE6300

الملخص

بحسب MITRE

Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 25/04/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-138250
• CPE: جاهز
• CWE: CWE-20 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.03363
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11535
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11535
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11535/