CVE-2019-17499

The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-10-11

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Ch7465lg Firmware (Compal)

References

• https://gbti.pl/public/10_2019-compal.txt