CVE-2017-11321

High

Published: 03/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The restricted shell interface in UCOPIA Wireless Appliance before version 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.

Risk Assessment

The organization may be exposed to unauthorized access to administrative privileges, potentially leading to serious security breaches.

Recommendation

It is recommended to update the UCOPIA Wireless Appliance to version 5.1.8 or later to mitigate this vulnerability.

Other vulnerabilities in UCOPIA Wireless Appliance

CVE-2017-11322High
The execution of the chroothole_client program in UCOPIA Wireless Appliance devices before version 5.1.8 allows remote attackers to gain root privileges by using a dollar sign ($) in the arguments.

Original NVD description (English source)

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS