LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution...

8.8 CVSS

Vulnerability Description

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-16752

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

linknet-usa

View all reports →

Affected Software

lw-n605r firmware

Vulnerable Versions:

12.20.2.1486

Timeline

Official Publish: September 20th, 2018

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.