Intrusion PreventionCTEK.SkyRouter.Arbitrary.Command.Execution
Description
This indicates an attack attempt against a Remote Code Execution vulnerability in CTEK SkyRouter 4200 and 4300.
This is due tp how the filters for user inputs fail to properly sanitize the parameter value that is passed to "cfg_ethping.cgi". An attacker may include shell commands by supplying an injection string through the URL.
Affected Products
CTEK SkyRouter 4200 and 4300
Impact
System Compromise: Remote attackers can gain control of vulnerable systems
Recommended Actions
Currently we are not aware of any vendor supplied patches for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 30529 |
| Created | Jan 05, 2012 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2011-5010 |
| Exploit Prediction Score | 87.17% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |