CVE-2020-18331

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), via the getpage parameter to /cgi-bin/webproc.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md	Exploit Third Party Advisory
https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24
https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md	Exploit Third Party Advisory
https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:chinamobileltd:gpn2.4p21-c-cn_firmware:w2000en-01:*:*:*:*:*:*:*

cpe:2.3:h:chinamobileltd:gpn2.4p21-c-cn:0.05:*:*:*:*:*:*:*

History

21 Nov 2024, 05:08

Type	Values Removed	Values Added
References	~~() https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md - Exploit, Third Party Advisory~~	() https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md - Exploit, Third Party Advisory
References	~~() https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24 -~~	() https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24 -
Summary		(es) Vulnerabilidad de Directory Traversal en el router inalámbrico ChinaMobile PLC modelo GPN2.4P21-C-CN que ejecuta la versión de firmware W2000EN-01 (plataforma de hardware Gpn2.4P21-C_WIFI-V0.05), a través del parámetro getpage en /cgi-bin/webproc.

07 Nov 2023, 03:19

Type	Values Removed	Values Added
References	{'url': 'https://medium.com/@SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24', 'name': 'https://medium.com/@SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}	() https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24 -

Information

Published : 2023-01-26 21:15

Updated : 2024-11-21 05:08

NVD link : CVE-2020-18331

Mitre link : CVE-2020-18331

CVE.ORG link : CVE-2020-18331

JSON object : View

Products Affected

chinamobileltd

gpn2.4p21-c-cn
gpn2.4p21-c-cn_firmware

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

9.1 /10