Files
CVEs-PoC/2017/CVE-2017-14127.md
2025-09-29 21:09:30 +02:00

691 B

CVE-2017-14127

Description

Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.

POC

Reference

No PoCs from references.

Github