CVE-2024-55545 Reflected Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

CVE-2024-55545 Reflected Cross-Site Scripting

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

CVE-2024-55545

CVE-2024-55545 affects ORing IAP-420 devices (web interface) with input validation failure leading to Reflected XSS in versions 2.01e and earlier. The root cause is missing input validation in the IAP-420 web UI, enabling cross-site scripting. Impact is client-side compromise through injected scr...

CVE-2024-55544 Authenticated Command Injection

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

CVE-2024-55544

CVE-2024-55544 concerns ORing IAP-420 devices. The connected documents consistently identify a vulnerability due to missing input validation in the web interface , affecting versions 2.01e and below . The core consequence described is authenticated command injections on the OS level . Some source...

CVE-2024-55544 Authenticated Command Injection

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

PT-2024-36547

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions through 2.01e Description The issue affects the NET-SNMP used in ORing IAP-420, allowing Command Injection through SNMP objects. Recommendations For versions through 2.01e, consider disabling the SNMP functionality until...

CVE-2024-55546: Improper Neutralization of Input During Web Page Generation

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

CVE-2024-55544: Improper Neutralization of Special Elements used in a Command

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

CVE-2024-55545: Improper Neutralization of Input During Web Page Generation

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...

PT-2024-36545

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions 2.01e and earlier Description The issue is caused by a lack of input validation in the web interface of ORing IAP-420, allowing Cross-Site Scripting XSS. Recommendations For versions 2.01e and earlier, update to a versio...

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

PT-2024-36548

Name of the Vulnerable Software and Affected Versions IAP-420 versions through 2.01e Description The issue is related to an improper check of password character length in the ORing operation of IAP-420, allowing a forced deadlock. Recommendations For versions through 2.01e, update to a version...

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

PT-2024-36546

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions 2.01e and below Description The issue is related to a lack of input validation in the web interface of the ORing IAP-420, which allows for stored Cross-Site Scripting XSS. This means that an attacker can inject malicious...

PT-2024-36544

Name of the Vulnerable Software and Affected Versions ORing IAP-420 versions 2.01e and below Description The issue is caused by missing input validation in the web interface of ORing IAP-420, allowing stored Cross-Site Scripting XSS. This enables attackers to store malicious scripts on the device...

CVE-2024-55548: Improper Check or Handling of Exceptional Conditions

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...

CVE-2024-55547: Improper Neutralization of Special Elements used in a Command

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...

CVE-2024-8355: Improper Neutralization of Special Elements used in an SQL Command

Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The...

Visteon Infotainment SQL注入漏洞

Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from a SQL injection vulnerability that stems from improper validation of user-supplied strings when DeviceManager parses iAP serial numbers, which could lead to an attacker executing...