CVE-2022-45721

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function...

CVE-2022-45716

CVE-2022-45716 affects IP-COM M50, version V15.11.0.33(10768). The vulnerability is a buffer overflow in the internal function formIPMacBindDel triggered via the indexSet parameter. CVSS v3.1 metrics in the sources show a CRITICAL base score (9.8) with network access, no user interaction, and imp...

CVE-2022-45711

Affected product: IP-COM M50 router, version 15.11.0.33(10768). Vulnerability: command injection via the hostname parameter in the formSetNetCheckTools function. Root cause / impact: underlying issue allows arbitrary command execution with network access, with high impact across confidentiality, ...

CVE-2022-45708

CVE-2022-45708 affects IP-COM M50, version V15.11.0.33(10768). A vulnerability in the formDelPortMapping function’s sPortMapIndex parameter enables a buffer overflow. Impacted components include the port-mapping logic (buffer overflow) with potential baseline CVSS v3.1 score of 9.8 (CRITICAL) and...

CVE-2022-45709

IP-COM M50, firmware version 15.11.0.33(10768), contains multiple command injection vulnerabilities in the formSetDebugCfg function. The issues are triggered via the pEnable, pLevel, and pModule parameters and are described with high impact (CVE-2022-45709). The CVSS data indicates a network-base...

CVE-2022-45706

IP-COM M50 router (version 15.11.0.33(10768)) has a buffer overflow in the formSetNetCheckTools function triggered via the hostname parameter. The issue is documented with high-severity impact (CVSS 3.1: CRITICAL) and is publicly discussed in multiple sources. A publicly disclosed mitigation sugg...

CVE-2022-45719

IP-COM M50 vulnerable to a buffer overflow via the gotoUrl parameter in the formPortalAuth function, affecting version 15.11.0.33(10768). The issue is documented across multiple sources (e.g., PT-2022-27632, CNNVD, NVD) and is described as a buffer overflow with high severity. The PT-2022-27632 p...

CVE-2022-45718

CVE-2022-45718 affects IP-COM M50 (firmware version 15.11.0.33(10768)). The vulnerability is a buffer overflow triggered via the rules parameter in the formIPMacBindAdd function. Public details in the provided connected documents consistently describe the issue and affected platform, but there is...

PT-2022-27621 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the rules parameter in the formAddDnsHijack function. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to the...

PT-2022-27626 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the rules parameter in the formAddDnsForward function. This issue can be exploited, potentially leading to unintended consequences. Recommendations: Fo...

CVE-2022-45717

CVE-2022-45717 affects IP-COM M50 firmware (V15.11.0.33(10768)). The issue is a command injection in the USB partition handling via the usbPartitionName parameter in the formSetUSBPartitionUmount function, exploitable by a crafted GET request. Public documents indicate high-severity impact (CVE w...

CVE-2022-45710

CVE-2022-45710 affects IP-COM M50 router (V15.11.0.33(10768)). Multiple buffer overflows occur via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function. Exploitation details are not provided in the documents; the vulnerability is described as buffer overflows, with a high i...

CVE-2022-45708

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function...

PT-2022-27622 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the sPortMapIndex parameter in the formDelPortMapping function. This issue can potentially be exploited, although specific details about the number of...

CVE-2022-45717

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the rules parameter in the formIPMacBindAdd function...

PT-2022-27627 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the indexSet parameter in the formQOSRuleDel function. This issue can potentially be exploited, although specific details about the estimated number of...

CVE-2022-45715

IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

IP-COM M50 操作系统命令注入漏洞

The IP-COM M50 is a wireless router from IP-COM USA. An operating system command injection vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount...

CVE-2022-45717: Improper Neutralization of Special Elements used in an OS Command

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request...