Back to search
CVE-2020-24365
Published: Sep 24, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://pastebin.com/QTev1TjM
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now