3 ms·

Here is the original vulnerability report: https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-005/-cisco-rv320-command-injection https://www.redteam-pen

• JdeBP 8y ago
  ... which has -A kurl in the proof of concept. I also note the timeline * 2019-01-22 Firmware 1.4.2.20 released by vendor ... * 2019-02-07 Incomplete mitigation of vulnerability identified ... * 2019-03-25 Vendor requests postponed disclosure So this is apparently a bad fix that Cisco has known about since February, and asked for an extension in order to fix again.