Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2020-7842

D'live AP command injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netis Korea D'live set-top box AP(WF2429TB)

  • 1.1.10 to ≤ 1.1.10affected

References