CVE-2020-12246: OS Command Injection
Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup_ipaddr parameter, or the Traceroute traceroute_ipaddr parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12246?
The severity of CVE-2020-12246 is considered critical with a CVSS score of 8.8.
How can the Beeline Smart Box 2.0.38 routers be affected by CVE-2020-12246?
Beeline Smart Box 2.0.38 routers are affected by CVE-2020-12246 through the "Advanced settings > Other > Diagnostics" feature.
What is the vulnerability description of CVE-2020-12246?
CVE-2020-12246 is a vulnerability that allows OS command injection via the Ping, Nslookup, or Traceroute parameters in the "Advanced settings > Other > Diagnostics" feature of Beeline Smart Box 2.0.38 routers.
Which software versions of Beeline Smart Box are affected by CVE-2020-12246?
Beeline Smart Box firmware version 2.0.38 is affected by CVE-2020-12246.
How can I mitigate the vulnerability in Beeline Smart Box 2.0.38 routers?
To mitigate the vulnerability in Beeline Smart Box 2.0.38 routers, it is recommended to update the firmware to a version that is not affected.