CVE-2017-12573: Critical severity PLANEX Cs-w50hd Firmware vulnerability
An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12573?
CVE-2017-12573 has been classified as a high severity vulnerability due to its command-injection capability.
How do I fix CVE-2017-12573?
To mitigate CVE-2017-12573, upgrade the firmware of the PLANEX CS-W50HD device to a version newer than 030720.
What types of devices are affected by CVE-2017-12573?
CVE-2017-12573 affects PLANEX CS-W50HD devices with firmware versions prior to 030720.
Can an attacker exploit CVE-2017-12573 remotely?
Yes, an attacker can exploit CVE-2017-12573 by sending a crafted HTTP POST request to the device's web management UI.
Is authentication required to exploit CVE-2017-12573?
Yes, exploiting CVE-2017-12573 requires authentication to access the web management UI of the device.