CVE-2020-18331

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), via the getpage parameter to /cgi-bin/webproc.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2023-01-26

Last modified

2025-04-01

Weaknesses

CWE-22

Affected products

• Gpn2.4p21-c-cn Firmware (Chinamobileltd)

References

• https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md
• https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-router…