CVE-2017-17562

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.971 · 100 %ileexploit · weaponizedEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 8 exploits · weaponized

Likely / severe?

97.1% (100th) EPSS

CVSS 6.8 · medium

Is it mine?

14 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

added 2021-12-10remediate by 2022-06-10

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-27

Embedthis GoAhead Remote Code Execution Vulnerability

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSD series radiocisa_csaf_ot
TD220X series radio firmware rev. 2.0.16
https://www.gegridsolutions.com/app/resources.aspx?prod=td-series&type=21
FixedTD220MAX series radiocisa_csaf_ot
TD220X series radio firmware rev. 2.0.16
https://www.gegridsolutions.com/app/resources.aspx?prod=td-series&type=21
FixedTD220X series radiocisa_csaf_ot
TD220X series radio firmware rev. 2.0.16
https://www.gegridsolutions.com/app/resources.aspx?prod=td-series&type=21
FixediNET/iNET II series radiocisa_csaf_ot
TD220X series radio firmware rev. 2.0.16
https://www.gegridsolutions.com/app/resources.aspx?prod=td-series&type=21
MitigationSD series radiocisa_csaf_ot
SD series radio firmware rev. 6.4.7
https://www.gegridsolutions.com/app/resources.aspx?prod=SDseries&type=21
MitigationTD220MAX series radiocisa_csaf_ot
SD series radio firmware rev. 6.4.7
https://www.gegridsolutions.com/app/resources.aspx?prod=SDseries&type=21
MitigationTD220X series radiocisa_csaf_ot
SD series radio firmware rev. 6.4.7
https://www.gegridsolutions.com/app/resources.aspx?prod=SDseries&type=21
MitigationiNET/iNET II series radiocisa_csaf_ot
SD series radio firmware rev. 6.4.7
https://www.gegridsolutions.com/app/resources.aspx?prod=SDseries&type=21

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–10

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.2 · impact 5.9

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Psecondary · FSTEC (BDU) RU

v3.010criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · CISA US

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 2.2 · impact 5.9

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-20US

exploits (8)

Public proof-of-concept and weaponised exploit code.

exploit/linux/http/goahead_ldpreloadGoAhead Web Server LD_PRELOAD Arbitrary Module Loadweaponized · metasploit
EDB-43360GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Remote Code Executionfunctional · exploit_db
EDB-43877GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)functional · exploit_db
1337g/CVE-2017-17562CVE-2017-17562 GOAHEAD RCE (Author: Daniel Hodson)PoC · poc_in_github
crispy-peppers/Goahead-CVE-2017-17562crispy-peppers/Goahead-CVE-2017-17562PoC · poc_in_github
ivanitlearning/CVE-2017-17562Standalone Python 3 exploit for CVE-2017-17562PoC · poc_in_github

affected products (14)

Products and version ranges known to be affected.

SD series radio: firmware versions prior to rev. 6.4.7all versionscisa_csaf_otUS
TD220MAX series radio: firmware versions prior to rev. 1.2.6all versionscisa_csaf_otUS
TD220X series radio: firmware versions prior to rev. 2.0.16all versionscisa_csaf_otUS
iNET/iNET II series radio: firmware versions prior to rev. 8.3.0all versionscisa_csaf_otUS
General Electric (GE) SD series radio< rev. 6.4.7cisa_csaf_otUS
General Electric (GE) TD220MAX series radio< rev. 1.2.6cisa_csaf_otUS
General Electric (GE) TD220X series radio< rev. 2.0.16cisa_csaf_otUS
General Electric (GE) iNET/iNET II series radio< rev. 8.3.0cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
Embedthis Software Embedthis GoAhead≤ 3.6.5fstec_bduRU
Moxa Inc. MOXA EDR-810≤ 4.1fstec_bduRU
embedthis goahead< 3.6.5nvdUScpe:2.3:a:embedthis:goahead:*:*:*:*:*:*:*:*
oracle integrated lights out manager= 3.0nvdUScpe:2.3:a:oracle:integrated_lights_out_manager:*:*:*:*:*:*:*:*
oracle integrated lights out manager= 4.0nvdUScpe:2.3:a:oracle:integrated_lights_out_manager:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-22-090-06General Electric Renewable Energy MDS Radios2022-03-31icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to control the configuration of the radio, join the network without proper authorization, or keep valid users from using the system correctly.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd NVD CVE.org MITRE

published 2017-12-12modified 2026-06-17

references (19)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan