EUVD-2016-1501

Malware in sbrugna...

CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

Code injection

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

Open redirect

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10312

Affected devices : Jensen of Scandinavia Air:Link family — AL3G (2.23m Rev.3), AL5000AC (v1.13), AL59300 (v1.04 Rev.4). Vulnerability : remote attackers can execute arbitrary commands by injecting shell metacharacters into certain /goform/* pages. This is a command-injection style issue impacting...

CVE-2016-10313

CVE-2016-10313 affects Jensen of Scandinavia Air:Link devices: AL3G (2.23m Rev 3), AL5000AC (1.13), and AL59300 (1.04 Rev 4). The issue is a Cross-Site Request Forgery vulnerability exploitable via certain /goform/* pages, allowing remote attackers to perform actions in the context of an authenti...

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

PT-2017-7854

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3 Jensen of Scandinavia AS Air:Link 5000AC AL5000AC version 1.13 Jensen of Scandinavia AS Air:Link 59300 AL59300 version 1.04 Rev. 4 Description The issue allows remote attackers to...

CVE-2016-10314: Exposure of Sensitive Information to an Unauthorized Actor

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

CVE-2016-10316: URL Redirection to Untrusted Site

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10313: Cross-Site Request Forgery (CSRF)

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2016-10315: URL Redirection to Untrusted Site

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

PT-2017-7852

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3 Jensen of Scandinavia AS Air:Link 5000AC AL5000AC version 1.13 Jensen of Scandinavia AS Air:Link 59300 AL59300 version 1.04 Rev. 4 Description The issue allows remote attackers to...

PT-2017-7853

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3 Jensen of Scandinavia AS Air:Link 5000AC AL5000AC version 1.13 Jensen of Scandinavia AS Air:Link 59300 AL59300 version 1.04 Rev. 4 Description The issue allows remote attackers to...

PT-2017-7855

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3 Jensen of Scandinavia AS Air:Link 5000AC AL5000AC version 1.13 Jensen of Scandinavia AS Air:Link 59300 AL59300 version 1.04 Rev. 4 Description The issue allows remote attackers to...

CVE-2016-10312: Improper Neutralization of Special Elements used in a Command

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

Stack overflow

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary code or crash the web service via the 1...

CVE-2016-10273: Out-of-bounds Write

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary code or crash the web service via the 1...

PT-2017-7843

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3 Jensen of Scandinavia AS Air:Link 5000AC AL5000AC version 1.13 Jensen of Scandinavia AS Air:Link 59300 AL59300 version 1.04 Rev. 4 Description Multiple stack buffer overflow...