{"cvss":0.0,"datePublished":"2019-12-13T00:00:00Z","dateUpdated":"2019-12-13T00:00:00Z","description":"An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OI_Fw_V20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mnt_ping.cgi. NOTE: This may overlap CVE-2017–14127.","dueDate":"","id":"CVE-2019-18396","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"td5130v2_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"technicolor td5130v2_firmware Improper Neutralization of Special Elements used in an OS Command","vendor":"technicolor"}