CVE-2020-7842 — D'live AP command injection vulnerability

CVE-2020-7842

D'live AP command injection vulnerability PUBLISHED

Description (CNA)

Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.

Affected (CNA)

Vendor / product	Versions
Netis Korea / D'live set-top box AP(WF2429TB)	affected 1.1.10 through 1.1.10

CWE

CWE-20

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35797

ADP enrichment

CVE

No English description supplied.

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35797