Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.
CPE | Name | Operator | Version |
---|---|---|---|
wifiber_120ac_inmesh_firmware | eq | >= 1.1220216 AND < 1.1220826 |