The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.
References
Link | Resource |
---|---|
https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/ | Exploit |
https://www.exploit-db.com/exploits/42937/ | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-10-02 18:29
Updated : 2020-10-02 07:55
NVD link : CVE-2017-11321
Mitre link : CVE-2017-11321
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
ucopia
- wireless_appliance