CVE-2018-20218

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in the login form.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Enc-400 Hdmi2 Firmware (Teracue)
• Enc-400 Hdmi Firmware (Teracue)
• Enc-400 Hdsdi Firmware (Teracue)

References

• http://seclists.org/fulldisclosure/2019/Feb/48
• https://zxsecurity.co.nz/research.html