CVE-2018-16752

HIGH EXPLOITED IN THE WILD

LINK-NET LW-N605R Firmware 12.20.2.1486 - Authenticated Remote Code Execution via Ping HOST Field

Title source: llm

Exploitation Summary

CVE-2018-16752 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including Nassim Asrir.

AI-analyzed exploit summary This exploit leverages command injection in the HOST field of the ping feature in LW-N605R devices. It authenticates with provided credentials and injects shell metacharacters to execute arbitrary commands.

Description

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.

Exploits (1)

exploitdb WORKING POC

by Nassim Asrir · pythonwebappshardware

https://www.exploit-db.com/exploits/45351

View Code ZIP pw:eip

This exploit leverages command injection in the HOST field of the ping feature in LW-N605R devices. It authenticates with provided credentials and injects shell metacharacters to execute arbitrary commands.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: LW-N605R firmware version 12.20.2.1486

Auth required

Prerequisites: Network access to the target device · Valid credentials (default admin:admin may work)

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.html

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/45351/

Scores

CVSS v3 8.8

EPSS 0.4266

EPSS Percentile 98.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-01-03

InTheWild.io 2024-05-29

CWE

CWE-78 CWE-1188

Status published

Products (1)

linknet-usa/lw-n605r_firmware 12.20.2.1486

Published Sep 20, 2018

Tracked Since Feb 18, 2026