Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the...

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Pre-shared key parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the we...

CVE-2023-51743

CVE-2023-51743 affects Skyworth Router CM5100, version 4.1.1.24. The issue arises from insufficient validation of the Set Upstream Channel ID (UCID) parameter at the web interface, enabling a remote attacker to supply crafted input. The documented impact is a Denial of Service (DoS) on the target...

CVE-2023-51742

CVE-2023-51742 affects Skyworth Router CM5100 (v4.1.1.24). The root cause is insufficient validation of the Add Downstream Frequency parameter at the device’s web interface, enabling a remote attacker to send crafted input that can cause a Denial of Service (DoS). Exploitation is network-based an...

CVE-2023-51742 Buffer Overflow vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at...

CVE-2023-51741

CVE-2023-51741 affects Skyworth Router CM5100, version 4.1.1.24. The root cause is the transmission of authentication credentials in plaintext over the network, allowing a remote attacker to eavesdrop network traffic and extract username and password from the router’s web interface (Password Rese...

CVE-2023-51740

CVE-2023-51740 affects Skyworth Router CM5100, version 4.1.1.24. The vulnerability arises from transmitting authentication credentials in plaintext over the network, enabling a remote attacker to eavesdrop network traffic and extract the username and password from the router’s web interface (Logi...

CVE-2023-51739

CVE-2023-51739 affects Skyworth Router CM5100 (version 4.1.1.24). The vulnerability stems from insufficient validation of the Device Name parameter in the router’s web interface, enabling a remote attacker to craft input that could be stored as XSS. Reports in connected documents confirm this is ...

CVE-2023-51738

CVE-2023-51738 affects Skyworth Router CM5100 (v4.1.1.24). The root cause is insufficient validation of the Network Name (SSID) input on the web interface, allowing a remote attacker to supply crafted input that can trigger stored XSS in the targeted system. Documents confirm vulnerable component...

CVE-2023-51737 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Preshared Phrase parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51736

CVE-2023-51736 affects Skyworth Router CM5100 (v4.1.1.24). The root cause is insufficient validation of the L2TP/PPTP Username input on the router’s web interface, enabling a remote attacker to craft input that could trigger stored Cross-Site Scripting (XSS). Impact is stored XSS on the targeted ...

CVE-2023-51736 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the we...

CVE-2023-51731

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Hostname parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interfac...

CVE-2023-51732

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51732

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51730

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51729

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51730

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...