Lucene search
+L

298 matches found

Positive Technologies
Positive Technologies
•added 2023/07/10 12:00 a.m.•18 views

PT-2023-4801 · Asus · Asus Rt-Ac86U +2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U V2 affected versions not specified ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description: A format string vulnerability is identified in the General function API of the affected...

10CVSS9.4AI score0.0128EPSS
SaveExploits0References22
OSV
OSV
•added 2023/05/23 1:15 a.m.•13 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS5.8AI score0.02374EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/05/23 1:15 a.m.•7 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS5.8AI score0.02374EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/23 1:15 a.m.•35 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS7.4AI score0.02374EPSS
SaveExploits1References1
Prion
Prion
•added 2023/05/23 1:15 a.m.•28 views

Command injection

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

5.8CVSS7.3AI score0.02374EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/05/23 12:00 a.m.•13 views

Linksys E2000 命令注入漏洞

The Linksys E2000 is a wireless router from Linksys, Inc. A command injection vulnerability exists in the Linksys E2000 1.0.06 firmware version, which stems from the fact that if an attacker gains web administrative privileges, he/she can inject commands into the post request parameters WLattenbb...

7.2CVSS7.2AI score0.02374EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/23 12:00 a.m.•77 views

CVE-2023-31740

CVE-2023-31740 affects Linksys E2000 routers (firmware 1.0.06). A command injection in the apply.cgi interface allows an attacker with web management privileges to inject commands via WL_atten_bb, WL_atten_radio, and WL_atten_ctl in post requests, potentially granting shell privileges. Documented...

7.2CVSS7.3AI score0.02374EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/05/23 12:00 a.m.•46 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.6AI score0.02374EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/05/23 12:00 a.m.•13 views

PT-2023-23441 · Linksys · Linksys E2000

Name of the Vulnerable Software and Affected Versions: Linksys E2000 router version 1.0.06 Description: The issue is related to a command injection vulnerability. If an attacker gains web management privileges, they can inject commands into the post request parameters WL atten bb, WL atten radio,...

7.2CVSS7.7AI score0.02374EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•0 views

CVE-2023-31740: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS5.9AI score0.02374EPSS
SaveExploits1References4
OSV
OSV
•added 2023/01/09 9:15 p.m.•11 views

CVE-2022-43973

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...

7.2CVSS6.4AI score0.01855EPSS
SaveExploits1References3
Prion
Prion
•added 2023/01/09 9:15 p.m.•25 views

Remote code execution

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...

5.8CVSS7.2AI score0.01855EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/06/17 8:15 p.m.•7 views

CVE-2022-31874

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

9.8CVSS5.4AI score0.19978EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/17 8:15 p.m.•17 views

CVE-2022-31874

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

9.8CVSS5.8AI score0.19978EPSS
SaveExploits1References1
Prion
Prion
•added 2022/06/17 8:15 p.m.•47 views

Command injection

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

7.5CVSS9.6AI score0.19978EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/06/17 7:29 p.m.•101 views

CVE-2022-31874

The CVE-2022-31874 entry describes an Asus RT-N53 device (firmware 3.0.0.4.376.3754) with a command injection flaw in the SystemCmd parameter of the apply.cgi interface. The vulnerability is supported by multiple sources (NVD, Red Hat, CVE list, CNNVD, etc.). Public exploitation details are not p...

9.8CVSS9.6AI score0.19978EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/17 7:29 p.m.•40 views

CVE-2022-31874

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

9.9AI score0.19978EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•13 views

ASUS RT-N53 命令注入漏洞

ASUS RT-N53 is a driver application from Asus Taiwan, China. A security vulnerability exists in ASUS RT-N53 version 3.0.0.4.376.3754, which originates from a command injection in the SystemCmd parameter of the apply.cgi interface...

9.8CVSS8.4AI score0.19978EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/04/10 9:15 p.m.•8 views

CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

5.4CVSS5.8AI score0.00575EPSS
SaveExploits0References3
NVD
NVD
•added 2022/04/10 9:15 p.m.•39 views

CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

5.4CVSS0.00575EPSS
SaveExploits0References1
Rows per page
Query Builder