CVE-2023-24046

CVE-2023-24046 affects Connectize AC21000 G6 (firmware 641.139.1.1256). The issue allows an attacker on an adjacent network to trigger the ping utility with a crafted string to execute arbitrary commands, per the description. Impact is high for confidentiality, integrity, and availability; exploi...

CVE-2023-24047

Technical details for CVE-2023-24047 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-24046

An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in the ping utility...

CVE-2023-24047

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

CVE-2023-24049

An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management...

CVE-2023-24052

An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not prompt for the current password...

CVE-2023-24048

The CVE-2023-24048 entry concerns a CSRF vulnerability in Connectize AC21000 G6 641.139.1.1256. The description states that attackers can gain control of the device via a crafted GET request to /man_password.htm. The connected Red Hat CVE entries reiterate the same description but there is no add...

CVE-2023-24050

Technical details for CVE-2023-24050 are not publicly available in the provided documents; monitor for updates.

CVE-2023-24049

An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management...

CVE-2023-24048

Cross Site Request Forgery CSRF vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /manpassword.htm...

CVE-2023-24052

An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not prompt for the current password...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256 that originates from allowing an attacker to run arbitrary commands by using specially crafted strings in the ping utility...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256 that stems from the presence of a credential mismanagement issue, which allows an attacker to elevate privileges through the use of a weak hash algorit...

CVE-2023-24052

The CVE-2023-24052 entry concerns Connectize AC21000 G6 641.139.1.1256. The vulnerability is in the change password functionality, which does not prompt for the current password, enabling an attacker to gain control of the device. The cited descriptions from Red Hat CVEs mirror this issue for the...

CVE-2023-24051

A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks...

CVE-2023-24046

An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in the ping utility...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256, which stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker could exploit the vulnerability to take control of the...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256, which stems from a mismanagement of credentials issue that allows an attacker to elevate privileges...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256, which stems from the presence of a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to run arbitrary code via...