CVE-2016-10760

On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the ping_ipaddr parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-06-11

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Swr-300a Firmware (Seowonintech)
• Swr-300b Firmware (Seowonintech)
• Swr-300bg Firmware (Seowonintech)
• Swr-300c Firmware (Seowonintech)

References

• https://ethical-hacker.org/en/seowonintech-remote-root/