Uagate Si Firmware Security Vulnerabilities
An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations.
9.8CVSS
9.5AI Score
0.007EPSS
An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter.
8.8CVSS
8.8AI Score
0.003EPSS
An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.
7.5CVSS
7.5AI Score
0.001EPSS
An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter.
8.8CVSS
8.7AI Score
0.001EPSS