Skip to content
OpenAdvisories
Unscored CVE-2017-14127 EUVD-2017-5639GHSA-mm3f-7647-5r4p

Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitra…

Published Sep 4, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.

References