Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

CVE-2018-15137 (clr-m20_firmware)

maltiger last edited by

CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-15137
Reply Quote
1 Reply Last reply

1
Posts

176
Views

Log in to reply

© Lightnetics 2024

1 / 1