Lucene search
+L

50 matches found

Positive Technologies
Positive Technologies
•added 2022/12/23 12:00 a.m.•18 views

PT-2022-27620 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered in the formSetNetCheckTools function via the hostname parameter. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to th...

9.8CVSS9.6AI score0.01067EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/23 12:00 a.m.•68 views

CVE-2022-45706

IP-COM M50 router (version 15.11.0.33(10768)) has a buffer overflow in the formSetNetCheckTools function triggered via the hostname parameter. The issue is documented with high-severity impact (CVSS 3.1: CRITICAL) and is publicly discussed in multiple sources. A publicly disclosed mitigation sugg...

9.8CVSS9.7AI score0.01067EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/23 12:00 a.m.•42 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

10AI score0.20185EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/23 12:00 a.m.•5 views

CVE-2022-45706: Buffer Copy without Checking Size of Input

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS6.1AI score0.01067EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/23 12:00 a.m.•6 views

CVE-2022-45711: Improper Neutralization of Special Elements used in an OS Command

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS5.9AI score0.20185EPSS
SaveExploits1References3
OSV
OSV
•added 2022/02/04 2:15 a.m.•18 views

CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

9.8CVSS7.6AI score0.01869EPSS
SaveExploits0References2
NVD
NVD
•added 2022/02/04 2:15 a.m.•25 views

CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

9.8CVSS0.01869EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/04 2:15 a.m.•24 views

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

7.5CVSS10AI score0.01869EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•15 views

CVE-2021-45987: Improper Neutralization of Special Elements used in an OS Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

9.8CVSS8.7AI score0.01869EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•6 views

PT-2022-12486

Name of the Vulnerable Software and Affected Versions Tenda routers G1 and G3 version 15.11.0.179502 CN Description A command injection issue was discovered in the function formSetNetCheckTools, allowing attackers to execute arbitrary commands via the hostName parameter. Recommendations For Tenda...

9.8CVSS0.01869EPSS
SaveExploits0References4
Rows per page
Query Builder