34 matches found
The vulnerability of the set_upgrade() function at the /cgi-bin/glc endpoint of the modem.so component of the GL.iNet GL-MT3000 router microprogramming system allows a intruder to execute arbitrary commands.
The vulnerability of the setupgrade function at the /cgi-bin/glc endpoint of the modem.so component of the GL.iNet GL-MT3000 router software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to inject arbitrary commands remotely...
CVE-2026-18684
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function removeprofile of the file /cgi-bin/glc of the component modem.so. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...
CVE-2026-18684
This CVE concerns GL.iNet GL-MT3000 devices (firmware up to 4.4.5). The issue lies in the function remove_profile of the file /cgi-bin/glc within component modem.so, enabling command injection. The vulnerability can be triggered remotely, and public exploit code exists. The vendor was informed an...
CVE-2026-18684 GL.iNet GL-MT3000 modem.so glc remove_profile command injection
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function removeprofile of the file /cgi-bin/glc of the component modem.so. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...
PT-2026-67543
Name of the Vulnerable Software and Affected Versions GL.iNet GL-MT3000 versions prior to 4.4.6 Description An issue exists in the modem.so component due to insufficient input validation. A remote attacker can exploit this to perform command injection via the remove profile function at the...
CVE-2022-33222
Information disclosure due to buffer over-read while parsing DNS response packets in Modem...
EUVD-2022-33053
Malicious code in bioql PyPI...
EUVD-2022-30647
Malicious code in bioql PyPI...
EUVD-2022-32362
Malicious code in bioql PyPI...
EUVD-2022-32140
Malicious code in bioql PyPI...
CVE-2022-26369
Out-of-bounds read in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...
CVE-2022-40521
Transient DOS due to improper authorization in Modem...
PT-2024-18617
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...
The vulnerability of Telit Cinterion modem’s microprogramming software lies in the use of files and directories accessible from external parties, allowing a perpetrator to gain access to read and write arbitrary files (or directories) within the system.
The vulnerability of Telit Cinterion modem’s microprogramming software lies in the use of files and directories accessible to external parties. Exploiting this vulnerability can allow a hacker to gain access to and read/write arbitrary files or directories within the system...
The vulnerability of Telit Cinterion modem microprogramming software, related to information disclosure, allows attackers to gain access to protected information.
The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to protected information...
The vulnerability of Telit Cinterion modem microprogramming software, related to information disclosure, allows a hacker to obtain information about hidden virtual paths and file names.
The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to obtain information about hidden virtual paths and file names...
PT-2024-14535 · Unknown · Modem-Ps-Nas-Ngmm
Name of the Vulnerable Software and Affected Versions: modem-ps-nas-ngmm affected versions not specified Description: The issue is related to incorrect error handling, which could lead to remote information disclosure without requiring additional execution privileges. This is due to a possible...
PT-2023-13294 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: Memory corruption occurs due to improper validation of an array index when a malformed APDU is sent from a card. Recommendations: At the moment, there is no information about a newer version...
CVE-2022-27874
Improper authentication in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...