PT-2020-15709 · Gemtek · Gemtek Wrtm-127X9+1

Published 2020-09-24 · Updated 2022-04-28 · CVE-2020-24365

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Gemtek WRTM-127ACN version 01.01.02.141 Gemtek WRTM-127x9 version 01.01.02.127

Description An issue allows an authenticated attacker to execute a command directly on the target machine via the Monitor Diagnostic network page. Commands are executed as the root user. This is particularly concerning since most routers are left with default credentials, potentially allowing attackers to gain access without needing to crack passwords.

Recommendations For Gemtek WRTM-127ACN version 01.01.02.141, consider restricting access to the Monitor Diagnostic network page until a fix is available. For Gemtek WRTM-127x9 version 01.01.02.127, consider restricting access to the Monitor Diagnostic network page until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-1188

CWE-78

Related Identifiers

CVE-2020-24365

Affected Products

Gemtek Wrtm-127Acn

Gemtek Wrtm-127X9

References · 8

• 🔥 https://pastebin.com/QTev1TjM · Exploit
• 🔥 https://exploit-db.com/exploits/49079 · Exploit
• 🔥 http://packetstormsecurity.com/files/160136/Gemtek-WVRTM-127ACN-01.01.02.141-Command-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-24365 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24365 · Security Note
• https://t.me/cybersecuritytechnologies/2154 · Telegram Post
• https://t.me/freedomf0x/10715 · Telegram Post
• https://t.me/ckure/6095 · Telegram Post