CVE-2018-20841

CRITICAL EXPLOITED IN THE WILD

Hootoo Tripmate Titan Ht-tm05 Firmware - OS Command Injection

Title source: rule

Description

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request.

Exploits (1)

exploitdb WORKING POC
by Andrei Manole · rubyremotehardware
https://www.exploit-db.com/exploits/46143

References (2)

Scores

CVSS v3 9.8
EPSS 0.3468
EPSS Percentile 97.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2019-06-13
InTheWild.io 2019-12-13
CWE
CWE-78
Status published
Products (2)
hootoo/tripmate_titan_ht-tm05_firmware 2.000.022
hootoo/tripmate_titan_ht-tm05_firmware 2.000.082
Published Jun 11, 2019
Tracked Since Feb 18, 2026