CVE-2017-6900

CVE-2017-6900 describes a critical command injection and authentication bypass vulnerability in Riello NetMan 204 firmware versions 14-2 and 15-2. The flaw stems from improper sanitization and quoting of variables in the login and wrongpass Python scripts, allowing for Bash command injection. Additionally, a poor error handling mechanism permits authentication as an administrator by providing a username of '-', even via a GET request. This vulnerability carries a CVSS v3.0 score of 9.8 (Critical), indicating it is easily exploitable over the network with low complexity and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. An attacker can gain administrative access, enabling services like Telnet/SSH and resetting user credentials. Despite its critical severity, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.