China Mobile Intelligent Home Gateway Command Injection Vulnerability

China Mobile Intelligent Home Gateway is an intelligent home gateway from China Mobile, a Chinese company. A security vulnerability exists in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4, which originates from a vulnerability that allows remote attackers to execute...

CVE-2023-41011

CVE-2023-41011 describes a high-severity command-execution vulnerability in China Mobile Intelligent Home Gateway (model v.HG6543C4). The flaw resides in the shortcut_telnet.cg component, enabling a remote attacker to run arbitrary code. CVSS 3.1 base score is 9.8 (CRITICAL) with network attack v...

China Telecom Tianyi Home Gateway Security Vulnerability

China Telecom Tianyi Home Gateway is a home gateway from Sichuan Tianyi Kanghe Communication. A security vulnerability exists in Sichuan Tianyi Kanghe Communication China Telecom Tianyi Home Gateway v.TEWA-700G, which can be exploited by a local attacker to obtain sensitive information via the...

PT-2023-27742 · Sichuan Tianyi Kanghe Communication Co. · Tianyi Home Gateway

Name of the Vulnerable Software and Affected Versions: Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway version v.TEWA-700G Description: The issue allows a local attacker to obtain sensitive information via the default password parameter. This is related to an Insecu...

CVE-2023-41012

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism...

CVE-2023-41012

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism...

China Mobile Intelligent Home Gateway Authorization Issue Vulnerability

China Mobile Intelligent Home Gateway is an intelligent home gateway from China Mobile, a Chinese company. A security vulnerability exists in China Mobile Intelligent Home Gateway, which can be exploited to execute arbitrary code via the authentication mechanism...

CVE-2023-41012

CVE-2023-41012 affects China Mobile Intelligent Home Gateway v.HG6543C4. Multiple sources (NVD, CVE listings, CNNVD, PT-Security) describe a remote-code-execution flaw in the gateway’s authentication mechanism, enabling an unauthenticated remote attacker to execute arbitrary code. CVSS v3.1 base ...

CVE-2023-41012: Session Fixation

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism...

CVE-2022-28374

Verizon 5G Home LVSKIHP OutDoorUnit ODU 3.33.101.0 does not property sanitize user-controlled parameters within the DMACC URLs on the Settings page of the Engineering portal. An authenticated remote attacker on the local network can inject shell metacharacters into...

Verizon 5G Home LVSKIHP 代码问题漏洞

The Verizon 5G Home LVSKIHP is an all-in-one integrated modem and router from Verizon USA. It provides access to Verizon Wireless 5G wireless home Internet services. A security vulnerability exists in Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162, which stems from an enablessh...

JM-DATA ONU JF511-TV Multiple Remote Vulnerabilities

Summary This ONU is the perfect GEPON home and business gateway. It is an all-rounder in perfection. It can BRIDGE/NAT/RIP ROUTEND and COMBINED. Description The device suffers from multiple vulnerabilities including: Default Credentials, CSRF, Authenticated Stored XSS and Open Redirect. JM-DATA O...

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

Cross site scripting

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23136

CVE-2022-23136 describes a stored XSS vulnerability in ZTE ZXHN F680 home gateway. The issue arises from lack of input/output validation in the gateway name, allowing an attacker to modify the gateway name and trigger XSS when users view the topology on the management page. Connected sources corr...

CVE-2022-23136: Improper Neutralization of Input During Web Page Generation

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23135

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

Directory traversal

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

CVE-2022-23135

The CVE-2022-23135 entry concerns a directory traversal vulnerability in ZTE Zxhn F677 home gateways. The connected documents specify that versions prior to 9.0.0p1n29 expose a flaw where the lack of validation of user-modified destination paths allows an attacker with certain permissions to modi...