CVE-2014-0356 in Wireless N300 NetUSB

Sumário (Inglês)

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1) detectWeather, (2) set_language, (3) SystemCommand, or (4) NTPSyncWithHost function in management.c, or a (5) SET COUNTRY, (6) SET WLAN SSID, (7) SET WLAN CHANNEL, (8) SET WLAN STATUS, or (9) SET WLAN COUNTRY udps command.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

05/12/2013

Divulgação

15/04/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
13013	ZyXEL Wireless N300 NetUSB management.c detectWeather Elevação de Privilégios	78	Não provado	Unavailable	CVE-2014-0356

Fontes

• MITRE
• NVD
• CVE Details