CVE-2023-41011

CVE-2023-41011 describes a high-severity command-execution vulnerability in China Mobile Intelligent Home Gateway (model v.HG6543C4). The flaw resides in the shortcut_telnet.cg component, enabling a remote attacker to run arbitrary code. CVSS 3.1 base score is 9.8 (CRITICAL) with network attack v...

PT-2023-27743

Name of the Vulnerable Software and Affected Versions China Mobile Intelligent Home Gateway version v.HG6543C4 Description The issue allows a remote attacker to execute arbitrary code via the shortcut telnet.cg component. This enables the attacker to potentially gain control over the affected...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

China Telecom Tianyi Home Gateway Security Vulnerability

China Telecom Tianyi Home Gateway is a home gateway from Sichuan Tianyi Kanghe Communication. A security vulnerability exists in Sichuan Tianyi Kanghe Communication China Telecom Tianyi Home Gateway v.TEWA-700G, which can be exploited by a local attacker to obtain sensitive information via the...

CVE-2023-41010

CVE-2023-41010 describes an Insecure Permissions vulnerability in the Sichuan Tianyi Kanghe / China Telecom Tianyi Home Gateway v.TEWA-700G. The issue allows a local attacker to obtain sensitive information via the device’s default password parameter . Affected product/version: v.TEWA-700G . Root...

PT-2023-27742 · Sichuan Tianyi Kanghe Communication Co. · Tianyi Home Gateway

Name of the Vulnerable Software and Affected Versions: Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway version v.TEWA-700G Description: The issue allows a local attacker to obtain sensitive information via the default password parameter. This is related to an Insecu...

CVE-2023-41012

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism...

CVE-2023-41012

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism...

CVE-2023-41012: Session Fixation

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism...

CVE-2023-41012

CVE-2023-41012 affects China Mobile Intelligent Home Gateway v.HG6543C4. Multiple sources (NVD, CVE listings, CNNVD, PT-Security) describe a remote-code-execution flaw in the gateway’s authentication mechanism, enabling an unauthenticated remote attacker to execute arbitrary code. CVSS v3.1 base ...

China Mobile Intelligent Home Gateway Authorization Issue Vulnerability

China Mobile Intelligent Home Gateway is an intelligent home gateway from China Mobile, a Chinese company. A security vulnerability exists in China Mobile Intelligent Home Gateway, which can be exploited to execute arbitrary code via the authentication mechanism...

CVE-2022-28374

Verizon 5G Home LVSKIHP OutDoorUnit ODU 3.33.101.0 does not property sanitize user-controlled parameters within the DMACC URLs on the Settings page of the Engineering portal. An authenticated remote attacker on the local network can inject shell metacharacters into...

Verizon 5G Home LVSKIHP 代码问题漏洞

The Verizon 5G Home LVSKIHP is an all-in-one integrated modem and router from Verizon USA. It provides access to Verizon Wireless 5G wireless home Internet services. A security vulnerability exists in Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162, which stems from an enablessh...

JM-DATA ONU JF511-TV Multiple Remote Vulnerabilities

Summary This ONU is the perfect GEPON home and business gateway. It is an all-rounder in perfection. It can BRIDGE/NAT/RIP ROUTEND and COMBINED. Description The device suffers from multiple vulnerabilities including: Default Credentials, CSRF, Authenticated Stored XSS and Open Redirect. JM-DATA O...

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

Cross site scripting

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23136

CVE-2022-23136 describes a stored XSS vulnerability in ZTE ZXHN F680 home gateway. The issue arises from lack of input/output validation in the gateway name, allowing an attacker to modify the gateway name and trigger XSS when users view the topology on the management page. Connected sources corr...

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23136: Improper Neutralization of Input During Web Page Generation

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

PT-2022-15874

Name of the Vulnerable Software and Affected Versions ZTE home gateway product affected versions not specified Description The issue is related to a stored XSS vulnerability in the ZTE home gateway product. An attacker can modify the gateway name by inserting special characters, which triggers an...