TI-2017-12470 CVE-2017-16934 · GHSA-qjgc-mf9m-9xq4
The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS…
Priority MEDIUM 57
The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Ba…