CVE-2018-6940

A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSRF.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-02-20

Last modified

2024-08-05

Weaknesses

CWE-352, CWE-79

Affected products

• Nat32 (Nat32)

References

• http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CVE-2018-6940.txt
• http://packetstormsecurity.com/files/146373/NAT32-Build-22284-Remote-Command-Execution.html
• http://www.securityfocus.com/archive/1/541777/100/0/threaded
• https://www.exploit-db.com/exploits/44033/