Lucene search
MitreCVELIST:CVE-2017-18372HistoryMay 02, 2019 - 4:15 p.m.
CVE-2017-18372
2019-05-0216:15:22
mitre
www.cve.org
3
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373.
Related
cve
cve
CVE-2017-18372
2019-05-02 17:29:01
CVE-2017-18373
2019-05-02 17:29:01
prion
prion
Command injection
2019-05-02 17:29:00
Command injection
2019-05-02 17:29:00
nvd
nvd
CVE-2017-18372
2019-05-02 17:29:01
CVE-2017-18373
2019-05-02 17:29:01
cvelist
cvelist
CVE-2017-18373
2019-05-02 16:15:34
metasploit
metasploit
TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection
2017-01-12 17:51:24