CVE-2020-24365

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user (uid 0). (Even if a login is required, most routers are left with default credentials.)

• CWE-78
• CWE-1188

• http://packetstormsecurity.com/files/160136/Gemtek-WVRTM-127ACN-01.01.02.141-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://pastebin.com/QTev1TjMExploit, Third Party Advisory
• http://packetstormsecurity.com/files/160136/Gemtek-WVRTM-127ACN-01.01.02.141-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://pastebin.com/QTev1TjMExploit, Third Party Advisory

Published

Sep 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24356`cloudflared` versions prior to 2020.8.1 contain a local pri…7.8
• CVE-2020-24359HashiCorp vault-ssh-helper up to and including version 0.1.6…7.5
• CVE-2020-24360An issue with ARP packets in Arista’s EOS affecting the 7800…7.4
• CVE-2020-24361SNMPTT before 1.4.2 allows attackers to execute shell code v…9.8
• CVE-2020-24363TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an una…8.8
• CVE-2020-24364MineTime through 1.8.5 allows arbitrary command execution vi…8.8
• CVE-2020-24366Sensitive information could be disclosed in the JetBrains Yo…3.3
• CVE-2020-24367Incorrect file permissions in BlueStacks 4 through 4.230 on …7.8
• CVE-2020-24368Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has …7.5
• CVE-2020-24369ldebug.c in Lua 5.4.0 attempts to access debug information v…7.5
• CVE-2020-24370ldebug.c in Lua 5.4.0 allows a negation overflow and segment…5.3
• CVE-2020-24371lgc.c in Lua 5.4.0 mishandles the interaction between barrie…5.3