Vulnerability Details CVE-2015-6018
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.249
EPSS Ranking 95.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://www.securitytracker.com/id/1034553
- https://www.exploit-db.com/exploits/38455/
- https://www.kb.cert.org/vuls/id/870744
- https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R
- http://www.securitytracker.com/id/1034553
- https://www.exploit-db.com/exploits/38455/
- https://www.kb.cert.org/vuls/id/870744
- https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R
Products affected by CVE-2015-6018
-
cpe:2.3:o:zyxel:pmg5318-b20a_firmware:-
-
cpe:2.3:o:zyxel:pmg5318-b20a_firmware:v100aanc0b5