CVE-2017-12573 - CVE House
Back to Database
Status published High CVE-2017-12573

An issue was discovered on PLANEX CS-W50HD devices with firmware...

Vulnerability Description

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-12573

Credits & Attribution

No credits recorded in the NVD database.

References

More from planex

View All →
CVE-2021-37289
Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and...
High 7.2
CVE-2017-12577
An issue was discovered on the PLANEX CS-QR20 1.30. A...
Critical 9.8
CVE-2017-12576
An issue was discovered on the PLANEX CS-QR20 1.30. A...
High 7.2
CVE-2017-12574
An issue was discovered on PLANEX CS-W50HD devices with firmware...
Critical 9.8

Affected Vendor

Affected Software

cs-w50hd firmware
Vulnerable Versions:
0

Timeline

Official Publish: August 24th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.