critical9.0Public exploit code
CVE-2014-8387
cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advantech EKI-6340 - Command Injection2014-11-24 · webapps · cgi · Verified
Impact
cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Eki-6340 Firmware | Version 2.05 |
| Advantech | Eki-6340 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Nov/58
- http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection
- http://www.securityfocus.com/archive/1/534021/100/0/threaded
- http://www.securityfocus.com/bid/71192
- http://seclists.org/fulldisclosure/2014/Nov/58
- http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection
- http://www.securityfocus.com/archive/1/534021/100/0/threaded
- http://www.securityfocus.com/bid/71192