20247 matches found
CVE-2024-51254: Improper Neutralization of Special Elements used in a Command
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the signcacertificate function...
Tenda AC7 ate_iwpriv_set function command injection vulnerability
Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a command injection vulnerability that stems from ateiwprivset failing to correctly filter construct command special characters, commands, and so on. An attacker can exploit this vulnerability to execute...
CVE-2024-51259
DrayTek Vigor3900 version 1.5.1.3 is vulnerable to a command injection flaw due to improper neutralization of special elements in the mainfunction.cgi endpoint. Attackers can execute arbitrary commands by calling the setup_cacertificate function, potentially leading to unauthorized system access ...
CVE-2024-51258
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doSSLTunnel function...
CVE-2024-51257
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doCertificate function...
CVE-2024-51298
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function...
CVE-2024-51300
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the getrrd function...
CVE-2024-51296
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pingtrace function...
CVE-2024-51299
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the dumpSyslog function...
CVE-2024-51301
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packetmonitor function...
CVE-2024-51296
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pingtrace function...
Cisco IOS XR Command Injection
The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands and increase their...
CVE-2024-51257
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doCertificate function...
CVE-2024-51300
The DrayTek Vigor3900 (version 1.5.1.3 ) is vulnerable to a command injection vulnerability (CWE-77). Attackers can inject malicious commands into the mainfunction.cgi endpoint and execute arbitrary commands by calling the get_rrd function. This vulnerability allows for high impact on confidentia...
CVE-2024-51301
The DrayTek Vigor3900 router, specifically version 1.5.1.3 , is vulnerable to a command injection flaw (CWE-77). Attackers can inject malicious commands into the mainfunction.cgi endpoint and execute arbitrary commands by invoking the packet_monitor function. The impact is categorized as HIGH sev...
CVE-2024-51298
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function...
CVE-2024-51300
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the getrrd function...
CVE-2024-51296
The Draytek Vigor3900 router, specifically version 1.5.1.3 , is vulnerable to a command injection flaw (CWE-77) within the mainfunction.cgi component. An attacker can inject malicious commands and execute arbitrary code by calling the pingtrace function. Practical consequences include the executi...