CVE-2017-16934
CriticalSummary
The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a "<%%25call system.exec:" string in the passwd parameter.
Risk Assessment
Attackers can gain full control over the device's operating system, leading to serious security breaches and potential data loss.
Recommendation
It is recommended to secure access to the administrative interface and implement strong passwords, as well as update the device firmware to eliminate this vulnerability.
Original NVD description (English source)
The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a "<%%25call system.exec:" string in the passwd parameter.