CVE-2020-8949

Published: Feb 12, 2020Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Gocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572, and ISP3000 4.3.0.17190 devices allows remote attackers to execute arbitrary OS commands via shell metacharacters in a ping operation, as demonstrated by the cgi-bin/webui/admin/tools/app_ping/diag_ping/; substring.

Affected (7)

Products: Gocloud: S2a Wl Firmware, S2a Firmware, S3a K2p Mtk Firmware, S3a Firmware, Isp3000 Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gocloud S2a Wl Firmware	Version 4.2.7.16471

Running on/with	Platform Versions
Gocloud S2a Wl	All versions

Configuration B

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gocloud S2a Firmware	Version 4.2.7.17278
Gocloud S2a Firmware	Version 4.3.0.15815
Gocloud S2a Firmware	Version 4.3.0.17193

Running on/with	Platform Versions
Gocloud S2a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gocloud S3a K2p Mtk Firmware	Version 4.2.7.16528

Running on/with	Platform Versions
Gocloud S3a K2p Mtk	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gocloud S3a Firmware	Version 4.3.0.16572

Running on/with	Platform Versions
Gocloud S3a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gocloud Isp3000 Firmware	Version 4.3.0.17190

Running on/with	Platform Versions
Gocloud Isp3000	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

https://sku11army.blogspot.com/2020/02/gocloud-rce-in-gocloud-routers.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://sku11army.blogspot.com/2020/02/gocloud-rce-in-gocloud-routers.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.