Vulnerability Details CVE-2020-18331
Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), via the getpage parameter to /cgi-bin/webproc.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.0%
CVSS Severity
CVSS v3 Score 9.1
References
- https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md
- https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24
- https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md
- https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24
Products affected by CVE-2020-18331
-
cpe:2.3:h:chinamobileltd:gpn2.4p21-c-cn:0.05
-
cpe:2.3:o:chinamobileltd:gpn2.4p21-c-cn_firmware:w2000en-01