34 matches found
CVE-2019-13025
Connect Box CH7465LG CVE-2019-13025 Información Este repositorio contiene dos PoCs para el Connect Box CH7465LG que ejecuta el Firmware CH7465LG-NCIP-6.12.18.24-5p8-NOSH o anterior. Para más información, echa un vistazo a mi blog. Uso Ejecución remota de código no autenticada $ python3 poc-rce.py...
Cable-modems
Análisis de módems ISP con WiFi Resumen SEARCH-LAB Ltd evaluó cinco modelos de puerta de enlace gateway doméstica, todos ellos utilizados por muchos proveedores de servicios de internet en todo el mundo, aunque los dispositivos reales eran operados por uno de los operadores de televisión por cabl...
CVE-2019-19967
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...
CVE-2019-17499
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the TargetIP parameter...
PT-2019-16025
Name of the Vulnerable Software and Affected Versions Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP version 6.12.18.25-2p6-NOSH Description The Administration page on the device accepts a cleartext password in a POST request on port 80, specifically to the "xml/setter.xml" URI. This issu...
Compal Broadband CH7465LG modem path traversal vulnerability
The Compal Broadband CH7465LG modem is a modem from Compal Computer Industries Compal of Taiwan, China. A path traversal vulnerability exists in the web interface of the Compal Broadband CH7465LG modem CH7465LG-NCIP-6.12.18.25-2p6-NOSH version, which arises from a failure of a networked system or...
CVE-2019-17224
The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...
CVE-2019-17224
The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...
Path traversal
The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...
CVE-2019-17224
The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...
CVE-2019-17224
The CVE-2019-17224 entry concerns the web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6-NOSH). A /%2f/ path traversal vulnerability could be exploited to probe for files outside the web root. Behavior observed in the description: if a file exists but is no...
PT-2019-15017
Name of the Vulnerable Software and Affected Versions Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH Description The web interface of the modem is susceptible to a path traversal attack via the / endpoint, allowing an attacker to check for the existence of files outside...
CVE-2019-17224: Improper Limitation of a Pathname to a Restricted Directory
The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...
Unspecified Vulnerability in Compal CH7465LG
The Compal CH7465LG is a wireless router from Compal Computer Industries Compal of Taiwan, China. A security vulnerability exists in the setter.xml component of the Common Gateway Interface in the Compal CH7465LG version 6.12.18.25-2p4, which is caused by the program not properly validating the...
CVE-2019-17499
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the TargetIP parameter...
CVE-2019-17499
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the TargetIP parameter...
Design/Logic Flaw
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the TargetIP parameter...
CVE-2019-17499
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the TargetIP parameter...
CVE-2019-17499
The CVE-2019-17499 issue affects the Compal CH7465LG series (example version 6.12.18.25-2p4). The setter.xml component of the Common Gateway Interface does not properly validate ping command arguments, allowing remote authenticated users to run OS commands as root via shell metacharacters in the ...
PT-2019-15172
Name of the Vulnerable Software and Affected Versions Compal CH7465LG version 6.12.18.25-2p4 Description The issue concerns the setter.xml component of the Common Gateway Interface, which fails to properly validate ping command arguments. This allows remote authenticated users to execute OS...