Lucene search
K

28 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/29 11:15 p.m.3 views

CVE-2022-36556

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08executeping01...

9.8CVSS7.3AI score0.02152EPSS
Exploits0References3
OSV
OSV
added 2022/08/29 11:15 p.m.0 views

CVE-2022-36556

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08executeping01...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/08/29 11:15 p.m.11 views

CVE-2022-36556

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08executeping01...

9.8CVSS0.02152EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/08/29 10:46 p.m.21 views

CVE-2022-36556

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08executeping01...

10AI score0.02152EPSS
Exploits0References2
CVE
CVE
added 2022/08/29 10:46 p.m.71 views

CVE-2022-36556

Seiko SkyBridge MB-A100/A110 (v4.2.0 and earlier) is affected by CVE-2022-36556 due to a command-injection vulnerability via the ipAddress parameter at the /07system08execute_ping_01 endpoint. The issue could allow a remote attacker to execute arbitrary commands with admin privileges on affected ...

9.8CVSS9.8AI score0.02152EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/08/29 12:0 a.m.1 views

Seiko Solutions SkyBridge MB-A100/A110 命令注入漏洞

The Seiko Solutions SkyBridge MB-A100/A110 is an LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in the Seiko Solutions SkyBridge MB-A100/A110 v4.2.0 and earlier, which stems from the ipAddress parameter being found to contain command injection...

9.8CVSS7.1AI score0.02152EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.13 views

Advantech WebAccess/NMS single-vlan-info SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the single-vlan-info endpoint. When parsing t...

7.5CVSS1.7AI score0.00282EPSS
Exploits0References1
CNVD
CNVD
added 2017/04/09 12:0 a.m.3 views

Command execution vulnerability in the slaveip and virtual_ipaddress parameters of Kirin bastion machine

Kirin Fortress is the open source operations and maintenance fortress. A command execution vulnerability exists in the slaveip and virtualipaddress parameters of the KyLin Fortress, which can be exploited by an attacker to execute arbitrary code because the parameters are not specially filtered...

8AI score
Exploits0
Rows per page
Query Builder