garis/Fastgate

Releases0

Stars2

CVE-2019-12489

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-12489 ↗	Nov 26, 2019Tuesday, 26 November 2019, 15:15	9.8 CRITICAL	10 HIGH
An issue was discovered on Fastweb Askey RTV1907VW 0.00.81_FW_200_Askey 2018-10-02 18:08:18 devices. By using the usb_remove service through an HTTP request, it is possible to inject and execute a command between two & characters in the mount parameter.