EUVD-2018-11645

Malware in sbrugna...

CVE-2018-19978

A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker authenticated as simple user in the same network as the device to trigger remote code execution via a POST request ManufacturerName parameter...

CVE-2018-19977

A command injection missing input validation, escaping in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker simple user -- in the same network as the device -- to trigger OS commands like starting telnetd or openin...

Command injection

A command injection missing input validation, escaping in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker simple user -- in the same network as the device -- to trigger OS commands like starting telnetd or openin...

CVE-2018-19978

A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker authenticated as simple user in the same network as the device to trigger remote code execution via a POST request ManufacturerName parameter...

CVE-2018-19978

CVE-2018-19978 affects the Auerswald COMfort 1200 IP phone, firmware 3.4.4.1-10589. The vulnerability is a buffer overflow in the DHCP/PPPOE configuration web interface. An attacker authenticated as a simple user on the same network can trigger a crafted POST request to the web server (via the Ma...

CVE-2018-19977

The CVE-2018-19977 issue affects the Auerswald COMfort 1200 IP phone (3.4.4.1-10589) via the ftp upgrade configuration interface. The vulnerability is a command injection caused by missing input validation/escaping, enabling an authenticated remote attacker on the same network to trigger OS comma...

CVE-2018-19977: Improper Neutralization of Special Elements used in an OS Command

A command injection missing input validation, escaping in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker simple user -- in the same network as the device -- to trigger OS commands like starting telnetd or openin...

CVE-2018-19978: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker authenticated as simple user in the same network as the device to trigger remote code execution via a POST request ManufacturerName parameter...

PT-2019-9953

Name of the Vulnerable Software and Affected Versions Auerswald COMfort 1200 IP phone version 3.4.4.1-10589 Description A buffer overflow issue exists in the DHCP and PPPOE configuration interface, allowing a remote attacker, authenticated as a simple user in the same network, to trigger remote...

PT-2019-9952

Name of the Vulnerable Software and Affected Versions Auerswald COMfort 1200 IP phone version 3.4.4.1-10589 Description The issue is related to a command injection due to missing input validation and escaping in the ftp upgrade configuration interface. This allows an authenticated remote attacker...