EUVD-2018-9610

Malware in sbrugna...

EUVD-2018-9611

Malware in sbrugna...

EUVD-2018-9609

Malware in sbrugna...

CVE-2018-17869

DASAN H660GW devices do not implement any CSRF protection mechanism...

CVE-2018-17867

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

CVE-2018-17868

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

Cross site scripting

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

Cross site request forgery (csrf)

DASAN H660GW devices do not implement any CSRF protection mechanism...

Design/Logic Flaw

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

CVE-2018-17869

CVE-2018-17869 affects DASAN H660GW devices, where the underlying cause is lack of CSRF protection. The entry notes no CSRF protection mechanism is implemented. NVD lists CVSS v2 base 6.8 (NETWORK, MEDIUM) and CVSS v3 base 8.8 (NETWORK, HIGH) with user interaction required. No exploitation detail...

CVE-2018-17867

The CVE-2018-17867 entry concerns DASAN H660GW devices, where the Port Forwarding functionality can be abused by remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr (Local IP Address) parameter. NVD data indicates a high-severity impact with ...

CVE-2018-17868

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

CVE-2018-17869

DASAN H660GW devices do not implement any CSRF protection mechanism...

CVE-2018-17867

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

CVE-2018-17869: Cross-Site Request Forgery (CSRF)

DASAN H660GW devices do not implement any CSRF protection mechanism...

CVE-2018-17867: Improper Neutralization of Special Elements used in an OS Command

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

CVE-2018-17868: Improper Neutralization of Input During Web Page Generation

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

PT-2018-14236

Name of the Vulnerable Software and Affected Versions DASAN H660GW affected versions not specified Description The issue is related to the lack of CSRF protection mechanism. This means that the device does not have a mechanism in place to prevent cross-site request forgery attacks. Recommendation...

PT-2018-14235

Name of the Vulnerable Software and Affected Versions DASAN H660GW affected versions not specified Description The issue is related to Stored XSS in the Port Forwarding functionality. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2018-14234

Name of the Vulnerable Software and Affected Versions DASAN H660GW devices affected versions not specified Description The issue concerns the Port Forwarding functionality, which allows remote attackers to execute arbitrary code. This is achieved by using shell metacharacters in the Addr paramete...