2246 matches found
CVE-2022-40990
CVE-2022-40990 refers to multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing of the Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 firmware. The TALOS advisory confirms a stack-based overflow in the DetranCLI templates, notably the command template starting with no b...
CVE-2022-40992
CVE-2022-40992 concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing of Siretta QUARTZ-GOLD, version G5.0.1.5-210720-141020. The overflow occurs in handling the command template no firmwall domain WORD description (WORD|null), via crafted network packets, enabling ...
CVE-2022-40985
The connected Talos advisories confirm CVE-2022-40985 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) with stack-based/remote command execution paths, including an arbitrary command execution sequence linked to the M2M/web features. Affected component: QUARTZ-GOLD firmware and its CLI/HTTP/M...
CVE-2022-40985
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40987
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40989
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40988
Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) has stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically the ipv6 static dns WORD WORD WORD template. TALOS details show a vulnerable use of sprintf without proper bounds checking, enabling arbitrary command execut...
CVE-2022-40987
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40989
Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 is vulnerable to stack-based buffer overflow in DetranCLI command parsing (bandwidth WORD dlrate/dlceil/ulrate/ulceil/priority) that can lead to arbitrary command execution. TALOS confirms concrete vulnerability pattern and provides CVE-2022-40989 detail...
CVE-2022-40987
CVE-2022-40987 affects Siretta QUARTZ-GOLD, specifically the DetranCLI command parsing stack-based buffer overflow in the G5.0.1.5-210720-141020 firmware. The issue stems from unsafe buffer handling in the command template for (ddns1|ddns2) username WORD password CODE, where a stack overflow can ...
CVE-2022-40988
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40988
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40986
CVE-2022-40986 is a TALOS-confirmed vulnerability affecting Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 . The issue originates in the DetranCLI command parsing, with multiple stack-based buffer overflow variants, including the command template (ddns1|ddns2) mx WORD , which can be triggered by craf...
CVE-2022-40986
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-38066
An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...
CVE-2022-41154
The CVE-2022-41154 entry concerns Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020). Talos confirms a directory traversal in the M2M DELETE_FILE command that can be exploited via a crafted UDP packet to execute arbitrary commands (unauthenticated) and delete files. The exploit path builds rm -rf comma...
CVE-2022-41154
A directory traversal vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary file deletion. An attacker can send a network request to trigger this vulnerability...
CVE-2022-38066
An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...
CVE-2022-38066
CVE-2022-38066 is an OS command injection in Siretta QUARTZ-GOLD’s httpd SNMP feature. Talos reports a vulnerability in QUARTZ-GOLD G5.0.1.5-210720-141020 where the SNMP daemon reads custom OIDs that map to exec entries in /etc/snmpd.conf. An unauthenticated or authenticated attacker can trigger ...
CVE-2022-41154
A directory traversal vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary file deletion. An attacker can send a network request to trigger this vulnerability...