CVE-2020-28137

Cross site request forgery CSRF in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router...

PT-2021-11447

Name of the Vulnerable Software and Affected Versions: Genexis Platinum 4410 V2 version 1.28 Description: The issue allows attackers to cause a denial of service by continuously restarting the router through cross site request forgery CSRF. Recommendations: For Genexis Platinum 4410 V2 version...

CVE-2020-28137: Cross-Site Request Forgery (CSRF)

Cross site request forgery CSRF in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router...

Genexis Platinum 4410 Cross-Site Request Forgery Vulnerability

Genexis Platinum 4410 is a router from Genexis A security vulnerability exists in the Genexis Platinum 4410 V2-1.28 that allows an attacker to cause a denial of service by continuously rebooting the router...

Exploit for OS Command Injection in Genexis Platinum_4410_Firmware

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in...

VulnCheck KEV: CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - Remote Code Execution Vulnerability

Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE Exploit Author: Jay Sharma Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Tested on: V2.1 CVE : CVE-2021-29003 steps to reproduce Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via she...

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Remote Command Execution

Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE Date: 12-4-2021 Exploit Author: Jay Sharma Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Tested on: V2.1 CVE : CVE-2021-29003 steps to reproduce Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute...

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE

Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE Date: 12-4-2021 Exploit Author: Jay Sharma Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Tested on: V2.1 CVE : CVE-2021-29003 steps to reproduce Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute...

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

Code injection

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

CVE-2021-29003

CVE-2021-29003 affects Genexis PLATINUM 4410 firmware 2.1 (P4410-V2-1.28). The vulnerability enables remote code execution by passing shell metacharacters to sys_config_valid.xgi (example: exeshell=%60telnetd%20%26%60). Public references describe the issue as a remote command injection in the rou...

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

CVE-2021-29003: Improper Neutralization of Special Elements used in an OS Command

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

PT-2021-18017

Name of the Vulnerable Software and Affected Versions: Genexis PLATINUM 4410 version 2.1 P4410-V2-1.28 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters to "sys config valid.xgi", as demonstrated by the "sys config valid.xgi?exeshell=telnetd &" URI...

Genexis Platinum 4410: Operating System Command Injection Vulnerability

Genexis Platinum 4410 is a router from Genexis A security vulnerability exists in the Genexis PLATINUM 4410 2.1 P4410-V2-1.28 that allows remote attackers to execute arbitrary code via shell metacharacters to validate system configuration...

Genexis Platinum-4410 P4410-V2-1.31A Cross Site Scripting

Exploit Title: Genexis Platinum-4410 P4410-V2-1.31A - 'startaddr' Persistent Cross-Site Scripting Date: 03/25/2020 Exploit Author: Jithin KS Vendor Homepage: https://www.gxgroup.eu/ont-products/ Version: Platinum-4410 Software version - P4410-V2-1.31A Tested on: Windows 10 Author Contact:...

Genexis Platinum-4410 P4410-V2-1.31A - (start_addr) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Genexis Platinum-4410 P4410-V2-1.31A - 'startaddr' Persistent Cross-Site Scripting Exploit Author: Jithin KS Vendor Homepage: https://www.gxgroup.eu/ont-products/ Version: Platinum-4410 Software version - P4410-V2-1.31A Tested on: Windows 10 Author Contact:...