RULE(RULE ID:337382)

Rule General Information
Release Date: 2023-03-13
Rule Name: Seowon Intech SLC-130 And SLR-120S Remote Code Execution Vulnerability (CVE-2020-17456)
Severity:
CVE ID:
Rule Protection Details
Description: SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference: ExploitDB:50821
http://packetstormsecurity.com/files/158933/Seowon-SlC-130-Router-Remote-Code-Execution.html
http://packetstormsecurity.com/files/166273/Seowon-SLR-120-Router-Remote-Code-Execution.html
https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Unauthenticated
Solutions
Refer to the announcement or patch by the vendor: http://www.seowonintech.co.kr/