ID:10754 - Exploit for Path traversal in WSR-2533DHPL2 and WSR-2533DHP3 - CVE-2021-20090

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:10754 - Exploit for Path traversal in WSR-2533DHPL2 and WSR-2533DHP3 - CVE-2021-20090

ID:10754 - Exploit for Path traversal in WSR-2533DHPL2 and WSR-2533DHP3 - CVE-2021-20090

Published: October 25, 2024


Vulnerability identifier: #VU52635
Vulnerability risk: Critical
CVE-ID: CVE-2021-20090
CWE-ID: CWE-22
Exploitation vector: Remote access
Vulnerable software:
WSR-2533DHPL2
WSR-2533DHP3

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in the web interfaces. A remote attacker can send a specially crafted HTTP request and bypass authentication.

Note, the vulnerability is being exploited in-the-wild by the Mirai botnet in August 2021.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.