CVE-2024-57226

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57228

The Linksys E7350 wireless router (version 1.1.00.032 ) is susceptible to a command injection vulnerability. The root cause is improper input validation when handling the iface parameter within the vif_disable() function. A remote attacker can exploit this by submitting a specially crafted reques...

CVE-2024-57226

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57228

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

PT-2025-3419 · Linksys · Linksys E7350

Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the iface parameter in the vif disable function. This allows for potential exploitation. No information is provided about the estimated number of...

CVE-2024-57228: Improper Neutralization of Special Elements used in a Command

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-57226: Improper Neutralization of Special Elements used in a Command

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

Linksys E7350 安全漏洞

The Linksys E7350 is a wireless router device from Leadsys. An input validation vulnerability exists in the handling of the iface parameter by the Linksys E7350 vifenable function, which can be exploited by a remote attacker to submit a special request that can be used in the application context ...

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 is affected by a command-injection vulnerability in function sub_424CB4. An attacker can send POST requests to /usr/bin/webmgnt and inject commands via the iface parameter. The CVE-2024-44466 entries across multiple sources (NVD/Red Hat/CNNVD/etc.) corroborate a high-severi...

CVE-2024-44466

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

PT-2024-31160

Name of the Vulnerable Software and Affected Versions COMFAST CF-XR11 version 2.7.2 Description The issue is a command injection vulnerability in the function sub 424CB4. Attackers can exploit this by sending POST request messages to the "/usr/bin/webmgnt" API endpoint and injecting commands into...

CVE-2024-44466: Improper Neutralization of Special Elements used in a Command

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...

CVE-2024-41314

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-41314

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

TOTOLINK A6000R 安全漏洞

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A6000R. The vulnerability stems from the iface parameter in the vifdisable function failing to properly validate or clear user input. An attacker can use this...

CVE-2024-41314

The TOTOLINK A6000R router, specifically version V1.0.1-B20201211.2000 , is susceptible to a command injection vulnerability in the vif_disable function. The root cause is the lack of proper neutralization or validation of special elements in the iface parameter, which allows an attacker to execu...

CVE-2024-41314: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...