PT-2024-10545 · Eltex · Eltex Smg-1016M

Published 2024-07-24 · Updated 2024-07-24

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Eltex SMG-1016M (affected versions not specified)

Description The issue exists due to the lack of measures to neutralize special elements in the Eltex SMG-1016M trunk gateway's firmware. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-01096

Affected Products

Eltex Smg-1016M

References · 4

• https://bdu.fstec.ru/vul/2025-01096 · Security Note
• https://old.eltex-co.ru/upload/iblock/cf6/hmm4jvz49i21c2kmun7kaprqqwe6pgdl/SMG-1016M,%20SMG-2016,%20SMG-3016_user_manual_3.405.1.pdf · Note
• https://old.eltex-co.ru/upload/iblock/1e9/c1foa0v13uai620i6y75w18kg39bhcom/smg1016m_firmware_3.23.0.5705.bin · Note
• https://old.eltex-co.ru/support/downloads · Note