CVE-2019-13025

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem.

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem.

Los dispositivos Compal CH7465LG versión CH7465LG-NCIP-6.12.18.24-5p8-NOSH, presentan un Control de Acceso Inapropiado debido a una Comprobación de Entrada Inapropiada. El atacante puede enviar una petición POST (HTTP) modificada maliciosamente que contiene comandos de shell, que será ejecutado en el dispositivo, a un end point de la API del back-end del módem de cable.