PT-2025-2651 · Iocharger · Iocharger

Name of the Vulnerable Software and Affected Versions: Iocharger firmware for AC models versions prior to 24120701 Description: The issue is related to an improper neutralization of special elements used in a command, also known as 'Command Injection', which allows OS Command Injection as root...

PT-2025-2649 · Iocharger · Iocharger

Name of the Vulnerable Software and Affected Versions: Iocharger firmware for AC models versions prior to 24120701 Description: The issue is related to command injection in a specific parameter of a .exe request, leading to remote code execution as the root user. This allows an attacker to have...

CVE-2024-12429

An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration All AC500 V3 products PM5xxx with...

CVE-2024-12430

An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 directory traversal, a successfully authenticated attacker can inject arbitrary commands into a...

CVE-2024-12429

An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration All AC500 V3 products PM5xxx with...

CVE-2024-12429

An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticated attacker can use this vulnerability to read system wide files and configuration All AC500 V3 products PM5xxx with...

CVE-2024-12429

ABB AC500v3 (PM5xxx) firmware versions earlier than 3.8.0 are affected by CVE-2024-12429 (directory traversal) that allows read access to system-wide files and configuration. A following CVE-2024-12430 enables command execution after exploiting CVE-12429, with root-level execution possible via a ...

CVE-2024-12430

An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 directory traversal, a successfully authenticated attacker can inject arbitrary commands into a...

CVE-2024-12430

An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 directory traversal, a successfully authenticated attacker can inject arbitrary commands into a...

CVE-2024-12430

CVE-2024-12429 affects ABB AC500 V3 (PM5xxx) firmware

CVE-2024-46603

An XML External Entity XXE vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service DoS via a crafted XML payload...

PT-2025-1843 · Ac500 V3 · Ac500 V3

Name of the Vulnerable Software and Affected Versions: AC500 V3 versions prior to 3.8.0 Description: An attacker who successfully exploits this issue could cause command execution. The vulnerability exists in the AC500 V3 version, where after successfully exploiting a directory traversal...

AVM FRITZ!Box 7530 AX 安全漏洞

AVM FRITZ!Box 7530 AX is a phone system from AVM for modern IP-based connectivity. A security vulnerability exists in AVM FRITZ!Box 7530 AX version v7.59 that stems from improper access control. An attacker could exploit the vulnerability to gain access to sensitive information...

CVE-2024-12856

The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this...

CVE-2024-12856

CVE-2024-12856 affects Four-Faith router models F3x24 and F3x36. The OS command-injection vulnerability exists in the adjust_sys_time functionality exposed via /apply.cgi, allowing an authenticated user to modify system time and execute arbitrary OS commands over HTTP. In firmware v2.0, default c...

ABB Cylon Aspect 3.08.02 (clearProjectConfigurationAjax.php) Remote Code Execution

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller suffers from an authenticated blind OS...

PT-2024-10256 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: The issue is related to a buffer overflow vulnerability in the Linksys E8450 Wi-Fi router's firmware. This vulnerability is caused by the lack of size verification when copying input data,...

D-Link DAP-2555 Denial of Service Vulnerability

The D-Link DAP-2555 is a wireless access point from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-2555 REVAFIRMWARE1.20 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2024-54982

The CVE-2024-54982 issue affects Quectel BC25 firmware version BC25PAR01A06, where authentication can be bypassed via a crafted NAS message. Root cause details in the connected PT-2024-36457 disclosure describe a NAS-based authentication bypass affecting BC25PAR01A06; no other product versions ar...

CVE-2024-47397

CVE-2024-47397 affects FXC AE1021 and AE1021PE with firmware 2.0.10 and earlier. The root cause is a weak authentication mechanism that can be bypassed by an undocumented specific string. Documented impacts in the sources describe a bypass of authentication, with no details on exploit vectors bey...