CVE:CVE-2021-39291
CNNVD:CNNVD-202108-1828
NetModule Router Software是NetModule的一款路由器。
NetModule Router Software 存在安全漏洞，该漏洞源于接口支持一个可选的“CLI-PHP”功能，它本质上是一个PHP webshel​​l，需要身份验证并且可以发送凭据作为 GET 参数，由于 GET 参数是 URL 的一部分，而 URL 是频繁存储，这可能使有权访问此类日志的攻击者采取在使用的帐户上。
solution:Upgrade netmodule nb800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1600_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1601_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1810_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2700_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2710_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2810_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3700_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3701_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3710_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3711_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3720_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105)