CVE-2018-20841

CRITICAL EXPLOITED IN THE WILD

HooToo TripMate Titan HT-TM05 Firmware 2.000.022 and 2.000.082 - Remote Command Execution via mac Parameter

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2018-20841 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including Andrei Manole.

AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Hotoo HT-05 devices by sending a crafted HTTP request to execute a telnetd backdoor. It then connects to the opened port to establish a remote shell.

Description

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request.

Exploits (1)

exploitdb WORKING POC
by Andrei Manole · rubyremotehardware
https://www.exploit-db.com/exploits/46143

This Metasploit module exploits a command injection vulnerability in Hotoo HT-05 devices by sending a crafted HTTP request to execute a telnetd backdoor. It then connects to the opened port to establish a remote shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Hotoo HT-05 firmware versions 2.000.022 and 2.000.082
No auth needed
Prerequisites: Network access to the target device · Target device must be running vulnerable firmware
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
https://www.exploit-db.com/exploits/46143
Exploit, Third Party Advisory x_refsource_misc
https://ioactive.com/hootoo-tripmate-routers-are-cute-but/

Scores

CVSS v3 9.8
EPSS 0.3182
EPSS Percentile 96.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2019-06-13
InTheWild.io 2019-12-13
CWE
CWE-78
Status published
Products (2)
hootoo/tripmate_titan_ht-tm05_firmware 2.000.022
hootoo/tripmate_titan_ht-tm05_firmware 2.000.082
Published Jun 11, 2019
Tracked Since Feb 18, 2026