CVE-2023-40357

CVE-2023-40357 affects multiple TP-LINK routers (Archer AX50, A10, AX10, AX11000). The issue stems from improper filtration of command-related characters, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands via the device. Affected firmware versions are: Archer AX5...

TP-LINK Archer A10 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in previous firmware versions of the TP-LINK Archer A10JPV2230504, which stems from a vulnerability that allows network-adjacent, unauthenticated attackers to execute arbitrary operating system...

PT-2023-5597 · Tp Link · Archer A10 +2

Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...

TP-LINK Archer 操作系统命令注入漏洞

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A command execution vulnerability exists in firmware versions prior to TP-LINK Archer AX50JPV1230529, Archer A10JPV2230504, which stems from an application failing to correctly filter constructed command special characters, command...

PT-2023-5275 · Tp Link · Tp-Link Archer A10

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A10 firmware versions prior to Archer A10JP V2 230504 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a network-adjacent unauthenticated...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

Remote code execution

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

CVE-2022-36602

The CVE-2022-36602 entry concerns InnoSilicon A10, specifically the a10_20200924_120556 build, which contains a remote code execution (RCE) vulnerability in the setPlatformAPI function. The issue enables an attacker to achieve code execution remotely, as indicated by the vulnerability description...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

PT-2022-23498 · Innosilicon · Innosilicon A10

Name of the Vulnerable Software and Affected Versions: InnoSilicon A10 version a10 20200924 120556 Description: A remote code execution issue was found in the setPlatformAPI function, allowing for potential exploitation. Recommendations: For InnoSilicon A10 version a10 20200924 120556, as a...

CVE-2020-25156

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root...

CVE-2020-25166

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper...

CVE-2020-25168

Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module...

CVE-2020-25160

Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration...

CVE-2020-25158

A reflected cross-site scripting XSS vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations...

CVE-2020-25152

A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges...

CVE-2020-25154

An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites...

A10 Networks ACOS/aGalaxy GUI RCE (A10-2020-0006)

According to its self-reported version number, the remote A10 appliance is affected by a remote code execution vulnerability in the management Graphical User Interface GUI. An unauthenticated, remote attacker with access to a management interface can exploit this to execute arbitrary code on the...

CVE-2020-24384

A10 Networks ACOS and aGalaxy management Graphical User Interfaces GUIs have an unauthenticated Remote Code Execution RCE vulnerability that could be used to compromise affected ACOS systems. ACOS versions 3.2.x including and after 3.2.2, 4.x, and 5.1.x are affected. aGalaxy versions 3.0.x, 3.2.x...