CVE-2020-17456

high-risk
Published 2020-08-20

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.

Do I need to act?

!
90.0% chance of exploitation in next 30 days
EPSS score — higher than 10% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
50821
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (5)

Affected Vendors

Seowonintech

References (10)

Third Party Advisory http://packetstormsecurity.com/files/158933/Seowon-SlC-130-Router-Remote-Code-Ex...
Third Party Advisory http://packetstormsecurity.com/files/166273/Seowon-SLR-120-Router-Remote-Code-Ex...
Exploit https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Una...
Exploit https://maj0rmil4d.github.io/Seowon-SlC-130-And-SLR-120S-Exploit/
Third Party Advisory https://www.exploit-db.com/exploits/50821
Third Party Advisory http://packetstormsecurity.com/files/158933/Seowon-SlC-130-Router-Remote-Code-Ex...
Third Party Advisory http://packetstormsecurity.com/files/166273/Seowon-SLR-120-Router-Remote-Code-Ex...
Exploit https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Una...
Exploit https://maj0rmil4d.github.io/Seowon-SlC-130-And-SLR-120S-Exploit/
Third Party Advisory https://www.exploit-db.com/exploits/50821
64
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 20/34 · Moderate
Exposure 12/34 · Low