CVE-2013-7179 - The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter

Back Back to CVE browser

HIGH

The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter

Published Feb 4, 2014

8.3

HIGH

CVSS 2.0

EPSS 4.00%

Description

The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://secunia.com/advisories/56756
third-party-advisoryx_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/431726
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6962
Advisory

Link	Providers	Tags
http://secunia.com/advisories/56756		third-party-advisoryx_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/431726		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6962		Advisory