CVE-2017-16544
mediumpriority · track · 37EPSS 0.061 · 93 %ileDEEURUUSEPSS · scored 2026-10-23
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedwago_psirt
Update your managed switch to the latest firmware: 852-303 (>= V1.2.2.S0) 852-1305 (>= V1.1.6.S0) 852-1505 (>= V1.1.5.S0) Firmwares published on Jun 7, 2019 or later are fixed. Please refer to the corresponding manual.
- Mitigationphoenix_contact_psirt
The pre-installed generic X.509 certificate should be renewed or replaced by an individual certificate during initial configuration. For details on replacing this certificate please refer to the user manual on page 51 et seq. Press 'renew' to create a new self-signed device certificate or upload a user specific certificate with the upload dialog. To avoid the manual generation of an individual certificate, the devices will be shipped with individual certificates starting with a future release.
- MitigationN-Tron 702-Wcisa_csaf_ot
Red Lion's 702-W Series was discontinued in 2018 and cannot be updated. Red Lion recommends these products be used locally within a secure network.
- MitigationN-Tron 702M12-Wcisa_csaf_ot
Red Lion's 702-W Series was discontinued in 2018 and cannot be updated. Red Lion recommends these products be used locally within a secure network.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–8.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (45)
Products and version ranges known to be affected.
- redlion n-tron 702-w firmwareall versionsnvdUScpe:2.3:o:redlion:n-tron_702-w_firmware:*:*:*:*:*:*:*:*
- redlion n-tron 702m12-w firmwareall versionsnvdUScpe:2.3:o:redlion:n-tron_702m12-w_firmware:*:*:*:*:*:*:*:*
advisories (3)
Vendor and ecosystem advisories describing this.
- VDE-2019-013WAGO: Multiple Vulnerabilities in industrial managed switches2019-06-12csaf · wago_psirtDE
Multiple vulnerabilities have been identified in WAGO 852-303, 852-1305 and 852-1505 industrial managed ethernet switches.
- VDE-2020-003PHOENIX CONTACT: TC Router and TC Cloud Client multiple vulnerabilities2020-03-05csaf · phoenix_contact_psirtDE
Multiple Vulnerabilities exist in components used by the aforementioned products. See CVE-Details for more information.
- ICSA-20-240-01Red Lion N-Tron 702-W, 702M12-W2020-08-27icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, execute system commands, and perform actions in the context of an attacked user.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (69)
External citations — patches, advisories, analysis.
- http://seclists.org/fulldisclosure/2019/Jun/18cnnvd
- http://seclists.org/fulldisclosure/2019/Sep/7cnnvd
- http://seclists.org/fulldisclosure/2020/Aug/20cnnvd
- http://seclists.org/fulldisclosure/2020/Mar/15cnnvd
- http://seclists.org/fulldisclosure/2020/Sep/6cnnvd
- http://seclists.org/fulldisclosure/2021/Aug/21cnnvd
- http://seclists.org/fulldisclosure/2021/Jan/39cnnvd
- http://seclists.org/fulldisclosure/2022/Jun/36cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan