CVE-2017-11322

High

Published: 03/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The execution of the chroothole_client program in UCOPIA Wireless Appliance devices before version 5.1.8 allows remote attackers to gain root privileges by using a dollar sign ($) in the arguments.

Risk Assessment

Attackers can gain full system privileges, posing a serious security threat to the organization.

Recommendation

It is recommended to update UCOPIA Wireless Appliance devices to version 5.1.8 or later to mitigate this vulnerability.

Other vulnerabilities in UCOPIA Wireless Appliance

CVE-2017-11321High
The restricted shell interface in UCOPIA Wireless Appliance before version 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.

Original NVD description (English source)

The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS