CVE-2019-11353 - The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters

Back Back to CVE browser

CRITICAL

The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters

Published May 9, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 3.07%

Description

The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters. This vulnerability is fixed in a later firmware version.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3032
Advisory
https://securityshards.wordpress.com/2019/04/21/cve-2019-11353-engenius-ews660ap-arbitrary-code-execution/
x_refsource_MISCExploitThird Party Advisory
https://www.engeniustech.com/engenius-products/managed-outdoor-wireless-ews660ap/
x_refsource_MISCProductVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3032		Advisory
https://securityshards.wordpress.com/2019/04/21/cve-2019-11353-engenius-ews660ap-arbitrary-code-execution/		x_refsource_MISCExploitThird Party Advisory
https://www.engeniustech.com/engenius-products/managed-outdoor-wireless-ews660ap/		x_refsource_MISCProductVendor Advisory