7 matches found
Tigo Energy Cloud Connect Advanced Command Injection Vulnerability
The Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. Tigo Energy Cloud Connect Advanced suffers from a command injection vulnerability due to a flaw in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is invoked. An attacker could exploit the...
The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.
The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...
Tigo Energy Cloud Connect Advanced 命令注入漏洞
The Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. Tigo Energy Cloud Connect Advanced suffers from a command injection vulnerability due to a flaw in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is invoked. An attacker could exploit the...
CVE-2025-26320
The t0mer BroadlinkManager version 5.9.1 is vulnerable to an OS command injection vulnerability. The root cause is the improper neutralization of special elements used in an OS command, specifically within the IP Address parameter at the /device/ping API endpoint. An attacker could potentially ex...
PT-2025-9681
Name of the Vulnerable Software and Affected Versions BroadlinkManager version 5.9.1 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the IP Address parameter at the "/device/ping" API endpoint. Recommendations For BroadlinkManager...
CVE-2025-26320: Improper Neutralization of Special Elements used in an OS Command
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
