CVEvulnerability
CVE-2020-7842
6.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-11-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.6 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.
Affected configurations
• netu wf2429tb firmware 1.1.10
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35797 Third Party Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35797 Third Party Advisory