Files
CVEs-PoC/2017/CVE-2017-12573.md
2025-09-29 21:09:30 +02:00

809 B

CVE-2017-12573

Description

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack.

POC

Reference

Github

No PoCs found on GitHub currently.