EUVD-2016-1501

Malware in sbrugna...

Code injection

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

Open redirect

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10312

Affected devices : Jensen of Scandinavia Air:Link family — AL3G (2.23m Rev.3), AL5000AC (v1.13), AL59300 (v1.04 Rev.4). Vulnerability : remote attackers can execute arbitrary commands by injecting shell metacharacters into certain /goform/* pages. This is a command-injection style issue impacting...

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10313

CVE-2016-10313 affects Jensen of Scandinavia Air:Link devices: AL3G (2.23m Rev 3), AL5000AC (1.13), and AL59300 (1.04 Rev 4). The issue is a Cross-Site Request Forgery vulnerability exploitable via certain /goform/* pages, allowing remote attackers to perform actions in the context of an authenti...

Stack overflow

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary code or crash the web service via the 1...