24 matches found
CVE-2020-10249
BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to valsoft.php3...
CVE-2020-10249
CVE-2020-10249 affects BWA DiREX-Pro 1.2181 devices. A vulnerability in the val_soft.php3 component allows full path disclosure via an invalid name array parameter, exposing the filesystem path and compromising confidentiality. The issue is described across multiple sources as a path traversal-st...
CVE-2020-10250
BWA DiREX‑Pro 1.2181 devices are affected by CVE-2020-10250: remote attackers can execute arbitrary OS commands through shell metacharacters in the PKG parameter to uninstall.php3. Root cause is unsafely handling the PKG input, enabling command injection. Documented impact is remote code executio...