CVE-2017-12576 - An issue was discovered on the PLANEX CS-QR20 1.30

Back Back to CVE browser

HIGH

An issue was discovered on the PLANEX CS-QR20 1.30

Published Aug 24, 2018

7.2

HIGH

CVSS 3.0

EPSS 2.20%

Description

An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can execute any command.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-668

References (1)

http://seclists.org/fulldisclosure/2018/Aug/27
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2018/Aug/27		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 24, 2018

Updated Aug 5, 2024

Reserved Aug 5, 2017

Link CVE-2017-12576

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-12576

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-12576