RCE in Gemteks Wrtm-127acn
CVE-2020-24365
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.114 (95.9th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.114 · newest: 0.114 · change: 0.000
Affected products
- Gemteks Wrtm-127acn
- Gemteks Wrtm-127acn Firmware — versions 01.01.02.141
- Gemteks Wrtm-127x9
- Gemteks Wrtm-127x9 Firmware — versions 01.01.02.127
Weakness classification (CWE)
References
- pastebin.com/QTev1TjM (Exploit, Third Party Advisory)
- packetstormsecurity.com/files/160136/Gemtek-WVRTM-127ACN-01.01.02.141-Command-I… (Exploit, VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-24365?
- CVE-2020-24365 is a high-severity vulnerability in Gemteks Wrtm-127acn, classified under OS Command Injection. CVSS score: 8.8/10. Published 2020-09-24.
- How severe is CVE-2020-24365?
- High severity. CVSS v3 base score is 8.8 out of 10.