high8.8Public exploit code
CVE-2017-12945
Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mersive Solstice 2.8.0 - Remote Code Execution2019-11-28 · webapps · android
Impact
Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mersive | Solstice Firmware | before 2.8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html
- https://documentation.mersive.com/content/pages/release-notes.htm
- https://github.com/aress31/cve-2017-12945
- https://www.exploit-db.com/exploits/47722
- http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html
- https://documentation.mersive.com/content/pages/release-notes.htm
- https://github.com/aress31/cve-2017-12945
- https://www.exploit-db.com/exploits/47722