17 matches found
EUVD-2018-9609
Malware in sbrugna...
EUVD-2018-9610
Malware in sbrugna...
EUVD-2018-9611
Malware in sbrugna...
Design/Logic Flaw
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...
Cross site scripting
DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...
CVE-2018-17868
DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...
CVE-2018-17869
DASAN H660GW devices do not implement any CSRF protection mechanism...
Cross site request forgery (csrf)
DASAN H660GW devices do not implement any CSRF protection mechanism...
CVE-2018-17867
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...
CVE-2018-17869
DASAN H660GW devices do not implement any CSRF protection mechanism...
CVE-2018-17868
DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...
CVE-2018-17867
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...
CVE-2018-17867
The CVE-2018-17867 entry concerns DASAN H660GW devices, where the Port Forwarding functionality can be abused by remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr (Local IP Address) parameter. NVD data indicates a high-severity impact with ...
CVE-2018-17869
CVE-2018-17869 affects DASAN H660GW devices, where the underlying cause is lack of CSRF protection. The entry notes no CSRF protection mechanism is implemented. NVD lists CVSS v2 base 6.8 (NETWORK, MEDIUM) and CVSS v3 base 8.8 (NETWORK, HIGH) with user interaction required. No exploitation detail...
CVE-2018-17867: Improper Neutralization of Special Elements used in an OS Command
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...