critical10.0Public exploit code
CVE-2011-5010
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CTEK SkyRouter 4200/4300 - Command Execution (Metasploit)2011-11-30 · remote · hardware · Verified
Impact
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ctekproducts | Skyrouter | Versions 4200, 4300 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev.metasploit.com/redmine/issues/5610
- http://osvdb.org/77497
- http://secunia.com/advisories/47003
- http://www.exploit-db.com/exploits/18172
- http://www.securityfocus.com/bid/50867
- http://dev.metasploit.com/redmine/issues/5610
- http://osvdb.org/77497
- http://secunia.com/advisories/47003
- http://www.exploit-db.com/exploits/18172
- http://www.securityfocus.com/bid/50867