CVE-2020-24849

概要

参考情報

• fruitywifi.com/index_eng.html · Vendor Advisory
• gist.github.com/harsh-bothra/f899045b16bbba264628d79d52c07c22 · Exploit
• xtr4nge/FruityWifi · Third Party Advisory

fruitywifi のその他の脆弱性

• CVE-2020-24848高 7.8FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root…
• CVE-2020-24847中 4.3A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_a…
• CVE-2018-19168緊急 9.8Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to ex…
• CVE-2018-17317緊急 9.8FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode,…