CVE-2018-17208 - CVE House
Back to Database
Status published High CVE-2018-17208

Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an...

Vulnerability Description

Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi (scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface). This occurs because shell metacharacters in the query string are mishandled by ShellExecute, as demonstrated by the zbtest.cgi?cmd=level&level= substring. This can also be exploited via CSRF.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17208

Credits & Attribution

No credits recorded in the NVD database.

References

More from linksys

View All →
CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown 0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical 9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High 7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium 4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High 7.5

Affected Vendor

Affected Software

velop firmware
Vulnerable Versions:
1.1.2.187020

Timeline

Official Publish: September 19th, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.