SMC D3G0804W Firmware D3GNV5M-3.5.1.6.10 GA
Approved changes feed: RSS · Atom
cpe:2.3:o:smc:d3g0804w_firmware:d3gnv5m-3.5.1.6.10_ga:*:*:*:*:*:*:*
part: o version: d3gnv5m-3.5.1.6.10_ga update: *
| Vendor | Smc (ed00c3cf-0dfa-5f35-8992-078a2618743d) |
|---|---|
| Product | D3G0804W Firmware (4394c5c5-66d5-515e-a587-57dee69de37d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8087 |
vulnerable | 2026-06-08 05:27:14.784122 |
Details available
SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the vlu_diagnostic_tools__ping_address parameter twice: once with a shell metacharacter and a command name, and once with a command argument.
Published: 2020-01-27T19:45:06.000Z
Updated: 2024-08-04T09:48:25.478Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.