From 2413e38f3bf3cec4b6f8171a15dea7e0fe6246eb Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Thu, 5 May 2022 10:54:17 -0400 Subject: [PATCH] Enhancement: cves/2021/CVE-2021-20167.yaml by mp --- cves/2021/CVE-2021-20167.yaml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/cves/2021/CVE-2021-20167.yaml b/cves/2021/CVE-2021-20167.yaml index e7a72fdc18..c23f930709 100644 --- a/cves/2021/CVE-2021-20167.yaml +++ b/cves/2021/CVE-2021-20167.yaml @@ -1,12 +1,10 @@ id: CVE-2021-20167 info: - name: Netgear RAX43 - Unauthenticated Command Injection / Authentication Bypass Buffer Overrun via LAN Interface + name: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun author: gy741 severity: critical - description: 'Netgear RAX43 version 1.0.3.96 contains a command injection and authentication bypass vulnerability. The readycloud_control.cgi CGI application is vulnerable to command injection in the name parameter. - Additionally, the URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the application. Note: This vulnerability uses a combination - of CVE-2021-20166 and CVE-2021-20167.' + description: 'Netgear RAX43 version 1.0.3.96 contains a command injection and authentication bypass vulnerability. The readycloud_control.cgi CGI application is vulnerable to command injection in the name parameter.Additionally, the URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the application. Note: This vulnerability uses a combination of CVE-2021-20166 and CVE-2021-20167.' reference: - https://www.tenable.com/security/research/tra-2021-55 - https://nvd.nist.gov/vuln/detail/CVE-2021-20166 @@ -34,4 +32,4 @@ requests: words: - "http" -# Enhanced by cs on 2022/02/22 +# Enhanced by mp on 2022/05/05