77 matches found
NETGEAR RAX5 安全漏洞
The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that originates from the iface parameter in the vifenable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...
CVE-2024-57233
CVE-2024-57233 relates to the NETGEAR RAX5 (AX1600 WiFi Router) with firmware 1.0.2.26. The vulnerability is a command injection in the vif_disable function that occurs because the iface parameter is not properly sanitized, allowing crafted input to cause the execution of arbitrary commands. This...
CVE-2024-57233
NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
CVE-2024-57235
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-57235
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-57233
NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
CVE-2024-57228
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
CVE-2024-57226
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-57226
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-57228
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
CVE-2024-57228
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
CVE-2024-57226
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-57228
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
PT-2025-3419 · Linksys · Linksys E7350
Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the iface parameter in the vif disable function. This allows for potential exploitation. No information is provided about the estimated number of...
CVE-2024-57228
CVE-2024-57228 affects Linksys E7350 firmware <= 1.1.00.032. A command-injection vulnerability exists in the vif_disable function, exploitable via the iface parameter. CVSS v3.1 base score is 8.0 (HIGH): Adjacent attack vector, low complexity, no user interaction, with high impacts on confiden...
Linksys E7350 安全漏洞
The Linksys E7350 is a wireless router device from Leadsys. An input validation vulnerability exists in the handling of the iface parameter by the Linksys E7350 vifenable function, which can be exploited by a remote attacker to submit a special request that can be used in the application context ...
CVE-2024-57226
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...