Netsweeper RCE Vulnerability CVE-2020-13167 Scanner

Details
Stay Up To Date
Asset Type

DOMAIN,IP,URL

Need Membership

Yes

Asset Verify

Yes

API Support

Yes

Estimate Time (Second)

30

Netsweeper RCE Vulnerability CVE-2020-13167 Scanner Detail

There is a remote code execution vulnerability in Netsweeper version 6.4.3. "webadmin/tools/unixlogin.php" (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.

Some Advice for Common Problems

Upgrade your Netsweeper to the latest version.

Need a Full Assessment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service