CVE-2018-16752

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 42.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-09-20 · updated 2026-06-17
Weakness: CWE-78

Description

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.

Affected products

Linknet-Usa Lw-N605R Firmware: 12.20.2.1486

References

http://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/45351/
http://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/45351/

Get alerted when CVE-2018-16752 or the next vulnerability affects your stack