CVE-2011-5010
high · 10apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
10
CVSS
64.8%
EPSS (exploit prob.)
99th
EPSS percentile
2011-12-25
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ctekproducts | skyrouter | 4200 |
| ctekproducts | skyrouter | 4300 |
Check a specific version with /api/v1/cve/match.
References
- http://dev.metasploit.com/redmine/issues/5610
- http://osvdb.org/77497
- http://secunia.com/advisories/47003
- http://www.exploit-db.com/exploits/18172
- http://www.securityfocus.com/bid/50867
- http://dev.metasploit.com/redmine/issues/5610
- http://osvdb.org/77497
- http://secunia.com/advisories/47003
- http://www.exploit-db.com/exploits/18172
- http://www.securityfocus.com/bid/50867
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-5010