critical9.8
CVE-2017-7318
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability.
Impact
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siklu | Etherhaul Firmware | through 7.3.0 |