Command injection

2023-02-1118:15:00

PRIOn knowledge base

www.prio-n.com

command injection

firmware update

device's telnet interface

authenticated attacker

arbitrary commands

root access

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

JSON

A command injection vulnerability in the firmware_update command, in the device’s restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.

CPENameOperatorVersion
dwl-2600ap_firmwareeq4.2.0.17

CPE	Name	Operator	Version
	dwl-2600ap_firmware	eq	4.2.0.17

References

www.tenable.com/security/research/tra-2023-1