PT-2022-11797

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation via the switchFastDhcp function in the...

CVE-2021-43162: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose...

CVE-2021-43160: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose...

PT-2022-11798

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential code execution. The issue is related to the doSwitchApi function in the...

CVE-2021-43159: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the setSessionTime function in /cgi-bin/luci/api/common...

CVE-2021-43163: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the checkNet function in /cgi-bin/luci/api/auth...

PT-2022-11799

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential code execution. The issue is related to the runPackDiagnose function in t...

PT-2022-11796

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation. The issue is related to the setSessionTime function in the...

PT-2022-11800

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation via the checkNet function in the "/cgi-bin/luci/api/auth" AP...

CVE-2021-43161: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch...

CVE-2021-40680

There is a Directory Traversal vulnerability in Artica Proxy 4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273 via the filename parameter to /cgi-bin/main.cgi...

CVE-2021-40680: Improper Limitation of a Pathname to a Restricted Directory

There is a Directory Traversal vulnerability in Artica Proxy 4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273 via the filename parameter to /cgi-bin/main.cgi...

PT-2022-11299

Name of the Vulnerable Software and Affected Versions Artica Proxy versions 4.30.000000 SP206 through SP255 Artica Proxy VMware appliance versions 4.30.000000 through SP273 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the filename parameter to t...

Artica Proxy 路径遍历漏洞

Artica Proxy is an open source Artica proxy solution from Artica France. A security vulnerability exists in Artica Proxy VMWare Appliance 4.30.000000 SP273 and earlier versions and Artica Proxy versions 4.30.000000 SP206 through SP255, which stems from a lack of filtering of the filename paramete...

CVE-2022-23900: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...

Tenda M3 Command Injection Vulnerability (CNVD-2022-33114)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /cgi-bin/uploadWeiXinPic to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerabili...

CVE-2022-27083

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic...

CVE-2022-27083: Improper Neutralization of Special Elements used in a Command

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic...

CVE-2022-27077: Improper Neutralization of Special Elements used in a Command

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...