Vulnerability Details CVE-2019-11353
The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters. This vulnerability is fixed in a later firmware version.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- https://securityshards.wordpress.com/2019/04/21/cve-2019-11353-engenius-ews660ap-arbitrary-code-execution/
- https://www.engeniustech.com/engenius-products/managed-outdoor-wireless-ews660ap/
- https://securityshards.wordpress.com/2019/04/21/cve-2019-11353-engenius-ews660ap-arbitrary-code-execution/
- https://www.engeniustech.com/engenius-products/managed-outdoor-wireless-ews660ap/
Products affected by CVE-2019-11353
-
cpe:2.3:h:engeniustech:ews660ap:-
-
cpe:2.3:o:engeniustech:ews660ap_firmware:2.0.284