CVE-2016-10760

CRITICAL

seowonintech swr-300a_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2016-10760 has a selected CVSS score of 9.8 (critical).

Description

On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the ping_ipaddr parameter.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 13, 2019 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

swr-300a_firmware

Browse seowonintech / swr-300a_firmware
VulnCheckVersion data not supplied

References

2