CVE-2017-6079
57Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 46%
from disclosure to weapon494 days
Published on NVDMay 16
1st PoC+494d
VulnCheck+1659d
exploitation probability
46%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006.
Affected products
n/a · n/apublic PoCs found — 1
vulncheckvulncheck.com/xdb/8a4b23f637c6unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.