{"cvss":0.0,"datePublished":"2019-06-13T00:00:00Z","dateUpdated":"2019-06-13T00:00:00Z","description":"Main_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execute arbitrary OS commands via service parameters, such as shell metacharacters in the destIP parameter of a cmdMethod=ping request.","dueDate":"","id":"CVE-2018-15887","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"dsl-n12e_c1_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"ASUS dsl-n12e_c1_firmware Improper Neutralization of Special Elements used in an OS Command","vendor":"ASUS"}