PT-2021-19371

Name of the Vulnerable Software and Affected Versions Netshield NANO 25 version 10.2.18 Description The issue allows OS command injection after authentication by the attacker on the /usr/local/webmin/System/manual ping.cgi endpoint because the system C library function is used unsafely...

Command injection

Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...

PT-2020-11955

Name of the Vulnerable Software and Affected Versions Comtrend VR-3033 DE11-416SSG-C01 R02.A2pvI042j1.d26m Description The issue concerns Multiple Authenticated Command Injection vulnerabilities. These vulnerabilities can be exploited via the ping and traceroute diagnostic pages. Specifically, th...

CVE-2020-10173: Improper Neutralization of Special Elements used in an OS Command

Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...

PT-2019-15393

Name of the Vulnerable Software and Affected Versions Technicolor TD5130v2 devices with Oi third-party firmware OI Fw V20 Description A Command Injection issue in the Ping module of the Web Interface allows remote attackers to execute arbitrary OS commands. This is achieved by exploiting the...

The vulnerability of the ping.cgi script in NETGEAR DGN2200v1 integrated router software allows a hacker to execute arbitrary commands and gain full control over the device.

The vulnerability of the ping.cgi script in NETGEAR DGN2200v1 integrated routing software exists because measures to neutralize the special elements used in the operating system command have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating syst...

PT-2017-2798

Name of the Vulnerable Software and Affected Versions Technicolor TD5336 OI Fw v7 Description The issue is related to command injection in the Ping Module of the Web Interface. It allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter t...

NETGEAR DGN2200 Arbitrary Command Execution Vulnerability

The NETGEAR DGN2200 is an ADSL router device. An arbitrary command execution vulnerability in ping.cgi in the NETGEAR DGN2200 version 10.0.0.50 can be exploited to execute arbitrary operating system commands via shell metacharacters in the pingIPAddr field of an HTTP POST request...

CVE-2017-6077

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the pingIPAddr field of an HTTP POST request...

CVE-2017-6077

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the pingIPAddr field of an HTTP POST request...

CVE-2017-6077: Improper Neutralization of Special Elements used in an OS Command

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the pingIPAddr field of an HTTP POST request...

NETGEAR DGN2200v1v2v3v4 - ping.cgi Remote Command Execution

NETGEAR DGN2200v1v2v3v4 - ping.cgi Remote Command Execution !/usr/bin/python Provides access to default user account, privileges can be easily elevated by using either: - a kernel exploit ex. memodipper was tested and it worked - by executing /bin/bd suid backdoor present on SOME but not all...

Netgear DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution

!/usr/bin/python Provides access to default user account, privileges can be easily elevated by using either: - a kernel exploit ex. memodipper was tested and it worked - by executing /bin/bd suid backdoor present on SOME but not all versions - by manipulating the httpd config files to trick the...

CVE-2015-6023

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands...

CVE-2015-6023

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands...

CVE-2015-6023

CVE-2015-6023 and CVE-2015-6024 affect NetComm Wireless HSPA 3G10WVE routers. The ping.cgi web interface in firmware older than 3G10WVE-L101-S306ETS-C01_R05 allows: (1) bypassing access controls via a direct request (CVE-2015-6023); and (2) remote command execution by authenticated users through ...

CVE-2015-6024: Improper Neutralization of Special Elements used in a Command

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIAIPADDRESS parameter...

CVE-2015-6023: Improper Access Control

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands...

PT-2017-6918

Name of the Vulnerable Software and Affected Versions NetCommWireless HSPA 3G10WVE wireless routers versions prior to 3G10WVE-L101-S306ETS-C01 R05 Description The issue allows remote attackers to bypass intended access restrictions via a direct request to the ping.cgi endpoint. This can potential...

NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities

Exploit for cgi platform in category web applications Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2015-6024 Date: ==== 03-05-2016 dd/mm/yyy...