CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 10.7% probability of exploitation in the next 30 days.
CVE
CVE-2018-20218
Severity
CRITICAL
CVSS
9.8
EPSS
10.73%
Original NVD Description
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in the login form.
Related CVEs
Other vulnerabilities affecting the same vendor(s)