CVE-2024-47865

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device...

CVE-2024-47865

CVE-2024-47865 affects Rakuten Turbo 5G firmware versions up to V1.3.18. The underlying issue is missing authentication for a critical function, allowing a remote, unauthenticated attacker to update or downgrade the device firmware. The impact is firmware integrity/availability risk (remote modif...

CVE-2024-48895

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command...

CVE-2024-48895

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command...

CVE-2024-48895

The CVE-2024-48895 entry affects Rakuten Turbo 5G firmware versions V1.3.18 and earlier, due to improper neutralization of special elements in OS commands (OS Command Injection). This could allow a remote authenticated attacker to execute arbitrary OS commands on affected devices. The issue is ro...

CVE-2024-52033

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...

CVE-2024-52033

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...

CVE-2024-48895: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command...

CVE-2024-47865: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device...

CVE-2024-52033: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...

Rakuten Turbo 5G 操作系统命令注入漏洞

The Rakuten Turbo 5G is a home router from Rakuten that requires no construction and plugs into a power outlet. An operating system command injection vulnerability exists in Rakuten Turbo 5G V1.3.18 and earlier versions, which stems from the presence of operating system command injection, where a...

Rakuten Turbo 5G 安全漏洞

Rakuten Turbo 5G is a home router from Rakuten that requires no construction and plugs into an electrical outlet. A security vulnerability exists in Rakuten Turbo 5G V1.3.18 and earlier versions, which arises from the exposure of sensitive system information to unauthorized control, where an...

Rakuten Turbo 5G 访问控制错误漏洞

The Rakuten Turbo 5G is a home router from Rakuten that requires no construction and plugs into an electrical outlet. An access control error vulnerability exists in Rakuten Turbo 5G V1.3.18 and earlier versions that stems from a lack of authentication for critical functions, where an...

PT-2024-35099 · Rakuten · Rakuten Turbo 5G

Name of the Vulnerable Software and Affected Versions: Rakuten Turbo 5G firmware versions V1.3.18 and earlier Description: Exposure of sensitive system information to an unauthorized control sphere issue exists. If this issue is exploited, a remote unauthenticated attacker may obtain information ...

PT-2024-32857

Name of the Vulnerable Software and Affected Versions Rakuten Turbo 5G firmware versions V1.3.18 and earlier Description A missing authentication for critical function vulnerability exists, allowing a remote unauthenticated attacker to update or downgrade the firmware on the device if exploited...

CVE-2024-28729

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to execute arbitrary code via a crafted request...

CVE-2024-28728

The DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 (version DWR-2000M 1.34ME ) and Dlink DWR 5G CPE (version DWR-2000M 1.34ME ) are vulnerable to a Cross Site Scripting (XSS) vulnerability. A local attacker can exploit this by sending a crafted payload to the WiFi SSID Name field to obtain sensitive i...

PT-2024-22545

Name of the Vulnerable Software and Affected Versions DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 version 1.34ME Dlink DWR 5G CPE DWR-2000M version 1.34ME Description The issue allows a local attacker to obtain sensitive information via the Port forwarding option. This is related to a Cross Site...

CVE-2024-28728: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via a crafted payload to the WiFi SSID Name field...

CVE-2024-28730: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via the file upload feature of the VPN configuration module...