7 matches found
CVE-2024-30973
An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...
V-SOL G/EPON ONU HG323AC-B 安全漏洞
The V-SOL G/EPON ONU HG323AC-B is a dual-band EasyMesh router from China's CoreTech V-SOL. A security vulnerability exists in the V-SOL G/EPON ONU HG323AC-B version V2.0.08-210715. An attacker can exploit the vulnerability to execute arbitrary code and obtain sensitive information via a specially...
CVE-2024-30973
The V-SOL G/EPON ONU HG323AC-B (firmware version V2.0.08-210715 ) is vulnerable to improper access control and code injection . A low-privileged authenticated user can exploit this by making crafted POST requests to the /boaform/getASPdata/formFirewall and /boaform/getASPdata/formAcc endpoints. B...
CVE-2024-30973
An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...
CVE-2024-30973: Improper Control of Generation of Code
An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...
CVE-2018-19524
An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal G/EPON+IPTV SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Webpasswd function allows remote attackers to cause a denial of service segmentation fault or achieve unauthenticated...
CVE-2018-19524
CVE-2018-19524 describes an unauthenticated stack overflow in Skyworth GPON HomeGateways/ONTs (DT741, DT721-cb, DT741-cb variants) caused by a long password in the Web_passwd function. The flaw allows remote attackers to trigger a denial of service (segmentation fault) or potentially achieve remo...