HIGH

CVE-2020-24365

CVSS v3

8.8

HIGH

EPSS Score

12.5%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)

Technical details

Published
9/24/2020

Frequently asked questions

What is CVE-2020-24365?

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)

Is CVE-2020-24365 actively exploited?

Active exploitation of CVE-2020-24365 has not been confirmed. The EPSS score is 12.5%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-24365?

CVE-2020-24365 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2020-24365 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.