The vulnerability of the Eltex ECCM monitoring and control system arises from incorrect configuration of the server authentication for SFTP/SCP protocols. This allows attackers to gain unauthorized access to temporary configuration files and device software using an arbitrary public SSH key.

The vulnerability of the Eltex ECCM monitoring and configuration management system is related to incorrect authentication policies on the SFTP/SCP server. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to temporary configuration files and device software using ...

PT-2026-33875

Уязвимость программного обеспечения системы мониторинга и управления конфигурациями Eltex ECCM связана с некорректной политикой аутентификации на SFTP/SCP-сервере. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к временным файлам...

EUVD-2018-7238

Malware in sbrugna...

EUVD-2020-29856

Malware in sbrugna...

EUVD-2018-7234

Malware in sbrugna...

EUVD-2018-7237

Malware in sbrugna...

EUVD-2018-7236

Malware in sbrugna...

EUVD-2020-29857

Malware in sbrugna...

EUVD-2018-7235

Malware in sbrugna...

CVE-2020-9026

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...

CVE-2020-9027

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...

The vulnerability of the Eltex NTU-RG-5420G-Wac router’s microprogramming software lies in the fact that the operation of writing data beyond the buffer in memory occurs when processing the value of the "_session" parameter in the cookie header. This allows a hacker to cause a service failure.

The vulnerability of the Eltex NTU-RG-5420G-Wac router’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the value of the "session" parameter in the cookie header. Exploiting this vulnerability allows a remote attacker to cause...

The vulnerability of the Eltex SMG-1016M router’s microprogramming software arises from the lack of measures to neutralize special elements, allowing a intruder to execute arbitrary codes.

The vulnerability of the Eltex SMG-1016M router’s microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

PT-2024-41626

Уязвимость микропрограммного обеспечения маршрутизатора Eltex NTU-RG-5420G-Wac связана с выходом операции за границы буфера в памяти при обработке значения параметра " session" в заголовке Cookie. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в...

The vulnerability of the web-based interface for controlling microprogrammed software in the Eltex MES5324 switch lies in insufficient validation of input data. This allows a perpetrator to trigger a reboot of the switch.

The vulnerability of the web interface for controlling microprogrammed software in the Eltex MES5324 switch lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a restart of the switch by sending specially crafted HTTP...

PT-2024-8126

Name of the Vulnerable Software and Affected Versions: Eltex MES5324 affected versions not specified Description: The issue is related to insufficient input validation in the web interface of the Eltex MES5324 switch's firmware management. An attacker can exploit this by sending specially crafted...

PT-2024-10545 · Eltex · Eltex Smg-1016M

Name of the Vulnerable Software and Affected Versions: Eltex SMG-1016M affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements in the Eltex SMG-1016M trunk gateway's firmware. Exploitation of this issue may allow a remote attacker t...

The vulnerability of the connected module “Kaspersky Security System” of the Eltex network interface “ESR-200” allows a intruder to cause a service failure.

The vulnerability of the connected module “Kaspersky Security System” of the Ethernet switch software “Eltex ESR-200” is related to the improper creation of connections. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Eltex “ESR-200” network interface microprogramming software, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the microprogrammed service router “ESR-20” is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the Eltex “ESR-200” network interface device allows a intruder to obtain preliminary information about the device.

The vulnerability of the NTPD microprogramming-based service router “ESR-20” is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain preliminary information about the device...