CVE-2020-24365
High · 8.8CVSS
8.8
EPSS
11.4%
Published
Sep 24, 2020
CISA due date
—
The record
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-116247 When a server in pgAdmin 4 had no password file, client certificate or client key… CWE-1188
- CVE-2026-116244 When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials… CWE-1188
- CVE-2026-116242 pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither… CWE-1188
- CVE-2026-112255 Initialization of a resource with an insecure default vulnerability in OpenText Advanced… CWE-1188
- CVE-2026-118691 xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the… CWE-1188
- CVE-2026-116273 MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts… CWE-1188
- CVE-2026-110952 A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled… CWE-1188
- CVE-2026-116672 Authlib is a Python library which builds OAuth and OpenID Connect servers. CWE-1188