Lucene search
K

288 matches found

CNNVD
CNNVD
added 2024/12/10 12:0 a.m.1 views

COMFAST CF-WR630AX 安全漏洞

COMFAST CF-WR630AX is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-WR630AX version v2.7.0.2, which stems from the use of hard-coded passwords found in /etc/shadow...

9.8CVSS6.7AI score0.00152EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/10 12:0 a.m.11 views

CVE-2024-54751

COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

9.7AI score0.00152EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.2 views

PT-2024-36415 · Comfast · Comfast Cf-Wr630Ax

Name of the Vulnerable Software and Affected Versions: COMFAST CF-WR630AX version 2.7.0.2 Description: The issue is related to a hardcoded password vulnerability in the /etc/shadow file, which allows attackers to log in as the root user. This vulnerability enables unauthorized access to the syste...

9.8CVSS7.4AI score0.00152EPSS
Exploits0References5
NVD
NVD
added 2024/09/11 4:15 p.m.11 views

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

9.8CVSS0.38954EPSS
Exploits1References1
OSV
OSV
added 2024/09/11 4:15 p.m.1 views

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

9.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2024/09/11 12:0 a.m.2 views

COMFAST CF-XR11 安全漏洞

COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version V2.7.2, which originates from a command injection vulnerability in the function sub424CB4, which allows an attacker to send a POST request message to...

9.8CVSS7.5AI score0.38954EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/09/11 12:0 a.m.13 views

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

0.38954EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/09/11 12:0 a.m.15 views

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

7.9AI score0.38954EPSS
Exploits1References1
CVE
CVE
added 2024/09/11 12:0 a.m.44 views

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 is affected by a command-injection vulnerability in function sub_424CB4. An attacker can send POST requests to /usr/bin/webmgnt and inject commands via the iface parameter. The CVE-2024-44466 entries across multiple sources (NVD/Red Hat/CNNVD/etc.) corroborate a high-severi...

9.8CVSS7.3AI score0.38954EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2024/05/28 8:16 p.m.6 views

CVE-2023-30310

An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service...

7.5CVSS6.5AI score0.00265EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/28 7:53 p.m.11 views

CVE-2023-30310

An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service...

6.8AI score0.00265EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/28 7:53 p.m.12 views

CVE-2023-30310

An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service...

6.5AI score0.00265EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/28 12:0 a.m.2 views

PT-2024-12229 · Comfast · Comfast Cf-616Ac

Name of the Vulnerable Software and Affected Versions: Comfast CF-616AC affected versions not specified Description: An issue in Comfast CF-616AC routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information...

7.5CVSS7AI score0.00265EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/28 12:0 a.m.1 views

Comfast CF-616AC 安全漏洞

Comfast CF-616AC is a WiFi router from China Four Seas Zonglian Network Technology Comfast. A security vulnerability exists in the Comfast CF-616AC that originates from allowing an attacker to hijack a TCP session, which could lead to a denial of service attack...

7.5CVSS6.5AI score0.00265EPSS
Exploits0References2
OSV
OSV
added 2023/08/15 8:15 p.m.1 views

CVE-2023-38866

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter interface and displayname...

9.8CVSS5.8AI score0.01101EPSS
Exploits1References1
NVD
NVD
added 2023/08/15 8:15 p.m.10 views

CVE-2023-38866

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter interface and displayname...

9.8CVSS9.8AI score0.01101EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/08/15 8:15 p.m.0 views

CVE-2023-38866

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter interface and displayname...

9.8CVSS5.8AI score0.01101EPSS
Exploits1References2
OSV
OSV
added 2023/08/15 8:15 p.m.4 views

CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

9.8CVSS6.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/08/15 8:15 p.m.0 views

CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

9.8CVSS6.1AI score0.00164EPSS
Exploits1References2
NVD
NVD
added 2023/08/15 8:15 p.m.7 views

CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

9.8CVSS9.7AI score0.00164EPSS
Exploits1References1
Rows per page
Query Builder