CVE-2019-12489

CRITICAL

Fastweb Fastgate 0.00.81 - Remote Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-12489 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

An issue was discovered on Fastweb Askey RTV1907VW 0.00.81_FW_200_Askey 2018-10-02 18:08:18 devices. By using the usb_remove service through an HTTP request, it is possible to inject and execute a command between two & characters in the mount parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

Proofs of concept

2

Catalogued exploits

ExploitDBFastweb Fastgate 0.00.81 - Remote Code ExecutionExploitDB exploitby Riccardo GaspariniNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubgaris/FastgateRepository PoCby garis2Not analyzed7 files

2.2 MiB

GitHub
PoC details

References

3