Lucene search

[email protected]NVD:CVE-2021-20122

HistoryOct 11, 2021 - 5:15 p.m.

CVE-2021-20122

2021-10-1117:15:07

CWE-78

[email protected]

web.nvd.nist.gov

telus wi-fi hub

firmware 3.00.20

authenticated

command injection

tr69_cmd.cgi

remote attacker

super user

bypass authentication

cve-2021-20122

shell

root

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.972

Percentile

99.9%

JSON

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router’s LAN and authenticated with a super user account, or using a bypass authentication vulnerability like CVE-2021-20090 could leverage this issue to run commands or gain a shell as root on the target device.

Affected configurations

Nvd

Node

telusprv65b444a-s-ts_firmwareMatch3.00.20

AND

telusprv65b444a-s-tsMatch-

VendorProductVersionCPE
telusprv65b444a-s-ts_firmware3.00.20cpe:2.3:o:telus:prv65b444a-s-ts_firmware:3.00.20:*:*:*:*:*:*:*
telusprv65b444a-s-ts-cpe:2.3:h:telus:prv65b444a-s-ts:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
telus	prv65b444a-s-ts_firmware	3.00.20	cpe:2.3:o:telus:prv65b444a-s-ts_firmware:3.00.20:::::::*
telus	prv65b444a-s-ts	-	cpe:2.3:h:telus:prv65b444a-s-ts:-:::::::*