What is CVE-2018-17208?

CVE-2018-17208 is a high-severity vulnerability in Linksys Velop, classified under OS Command Injection. CVSS score: 8.8/10. Published 2018-09-19.

How severe is CVE-2018-17208?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Linksys Velop

CVE-2018-17208

Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi (scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface). This occurs because shell metacharacters in the query string are mishandled by ShellExecute, as demonstrated by the zbtest.cgi?cmd=level&level= substring. This can also be exploited via CSRF.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Linksys Velop
Linksys Velop_firmware — versions 1.1.2.187020
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-17208?: CVE-2018-17208 is a high-severity vulnerability in Linksys Velop, classified under OS Command Injection. CVSS score: 8.8/10. Published 2018-09-19.
How severe is CVE-2018-17208?: High severity. CVSS v3 base score is 8.8 out of 10.