Lucene search
+L

33 matches found

OSV
OSV
•added 2023/04/28 2:15 p.m.•17 views

CVE-2023-2373

A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Management Interface. The manipulation of the argument ecn-up leads to command injection. It is possible to initiate the attack remotely. T...

8.8CVSS5.4AI score0.07621EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•27 views

PT-2023-19172

Name of the Vulnerable Software and Affected Versions Ubiquiti EdgeRouter X versions up to 2.0.9-hotfix.6 Description A critical issue has been found in the Web Management Interface component. The manipulation of the ecn-down argument leads to command injection. This issue can be exploited...

8.8CVSS6.6AI score0.06857EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•16 views

Ubiquiti EdgeRouter 命令注入漏洞

The Ubiquiti EdgeRouter is a router from Ubiquiti USA. A command injection vulnerability exists in Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 and prior versions, which stems from an incorrect operation of the parameter ecn-up that can lead to command injection...

8.8CVSS7AI score0.07621EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•5 views

CVE-2023-2374: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management Interface. Performing a manipulation of the argument ecn-down results in command injection. It is possible to initiate the attack remotely...

8.8CVSS5.4AI score0.06857EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•2 views

CVE-2023-2373: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface. Such manipulation of the argument ecn-up leads to command injection. The attack may be performed from remote. The exploit is publicly...

8.8CVSS5.4AI score0.07621EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•19 views

Ubiquiti EdgeRouter 命令注入漏洞

The Ubiquiti EdgeRouter is a router from Ubiquiti USA. A command injection vulnerability exists in Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 and prior versions, which stems from an incorrect operation of the parameter ecn-down that can lead to command injection...

8.8CVSS7AI score0.06857EPSS
SaveExploits1References4
Prion
Prion
•added 2022/08/31 8:15 p.m.•25 views

Out-of-bounds

In subsys/net/ip/tcp.c , function tcpflags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero...

5CVSS5.5AI score0.00573EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2022/08/31 7:40 p.m.•14 views

CVE-2022-1841 Out-of-bound write in tcp_flags

In subsys/net/ip/tcp.c , function tcpflags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero...

7.2CVSS6.1AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2022/08/31 7:40 p.m.•45 views

CVE-2022-1841 Out-of-bound write in tcp_flags

In subsys/net/ip/tcp.c , function tcpflags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero...

7.2CVSS7.3AI score0.00573EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/31 7:40 p.m.•84 views

CVE-2022-1841

CVE-2022-1841 – Zephyr Project : In subsys/net/ip/tcp.c, function tcp_flags, when the incoming parameter flags is ECN or CWR, the buf is written out-of-bounds with a zero byte. Documented impact is a network-originated issue with potential confidentiality/integrity/availability considerations per...

7.2CVSS6AI score0.00573EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/31 12:00 a.m.•6 views

CVE-2022-1841: Out-of-bounds Write

In subsys/net/ip/tcp.c , function tcpflags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero...

7.2CVSS6AI score0.00573EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•53 views

Fedora 29 : systemd (2018-c402eea18b)

Fix a local vulnerability from a race condition in chown-recursive CVE-2018-15687, 1639076 - Fix a local vulnerability from invalid handling of long lines in state deserialization CVE-2018-15686, 1639071 - Fix a remote vulnerability in DHCPv6 in systemd-networkd CVE-2018-15688, 1639067 - The DHCP...

8.8CVSS6.5AI score0.02261EPSS
SaveExploits10References4
securityvulns
securityvulns
•added 2003/03/28 12:00 a.m.•39 views

snort protection bypass

Packest with SYN,FIN,ECN bits set are not detected...

2.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder