Vulnerability Details CVE-2020-24365
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)
Exploit prediction scoring system (EPSS) score
EPSS Score 0.154
EPSS Ranking 94.3%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2020-24365
-
cpe:2.3:h:gemteks:wrtm-127acn:-
-
cpe:2.3:h:gemteks:wrtm-127x9:-
-
cpe:2.3:o:gemteks:wrtm-127acn_firmware:01.01.02.141
-
cpe:2.3:o:gemteks:wrtm-127x9_firmware:01.01.02.127