66 matches found
PT-2016-5117
Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware prior to 01A.8 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved via the dnsmasq parameter, also known as 5066, ...
Systech SysLINK M2M Modular Gateway Command Execution Vulnerability
The Systech SysLINK SL-1000 M2M Machine-to-Machine Modular Gateway is a router product from Systech, Inc. that provides DHCP, NAT, VPN, and firewall features. A command execution vulnerability exists in the web interface of the Systech SysLINK SL-1000 M2M Modular Gateway. A remote attacker can...
CVE-2016-2332: Improper Neutralization of Special Elements used in a Command
flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066 aka dnsmasq parameter...
CVE-2016-2331: Undefined Security Weakness
The web interface on SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2016-2333: Undefined Security Weakness
SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another...
