In ProLink PRC2402M V1.0.18 and... CVE-2021-36706

7.5 AV AC AU C I A
发布： 2021-08-06
修订： 2024-11-21

In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is passed directly to system.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有2条受影响产品信息