CVE-2017-12573

CVE-2017-12573 describes a command-injection vulnerability in the web management UI of PLANEX CS-W50HD devices with firmware older than 030720, specifically on the NAS settings page. An authenticated attacker can exploit this flaw by sending a crafted HTTP POST request to execute arbitrary code. This vulnerability carries a high CVSSv3 score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability compromise, though it requires prior authentication. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.