Security Advisory

CVE-2017-18369

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-02 16:14:35
Last updated 2024-08-05 21:20:50
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter.