HOMEVULNERABILITIESCVE-2013-7179
HIGHPOC

CVE-2013-7179

CWE-20Published: February 4, 2014· Updated: Jun 17, 2026

8.3
CVSS v3.1

Official Description

The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter.

NVD Source

Technical Analysis

CVE-2013-7179 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2013-7179. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorAdjacent
Attack ComplexityLow
Privileges Req.
User Interaction
Scope
Impact
ConfidentialityC
IntegrityC
AvailabilityC
AV:A/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors & Products

seowonintech1 product(s)
swc-9100
Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

POC AVAILABLEProof-of-concept code exists
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

All References (4)

http://www.kb.cert.org/vuls/id/431726Third Party Advisory · US Government Resource
http://www.kb.cert.org/vuls/id/431726Third Party Advisory · US Government Resource

Quick Facts

CVE IDCVE-2013-7179
CVSS Score8.3 / 10
SeverityHIGH
WeaknessCWE-20
CISA KEVNo
ExploitPOC
Affected1 vendor(s)
PublishedFeb 4, 2014

Related CVEs (CWE-20)

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2013-7179 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.