Lucene search
+L

3880 matches found

Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.17 views

PT-2024-18617

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

6.7CVSS5.9AI score0.00176EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/12/02 12:00 a.m.6 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that originates from a Modem Task Boundary Check that could result in an out-of-bounds write...

6.7CVSS6.7AI score0.00176EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.6 views

PT-2024-18619 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to an incorrect bounds check in the Modem, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user...

6.7CVSS7AI score0.00176EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/12/02 12:00 a.m.22 views

CVE-2024-39890

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300. The baseband software does not properly check the length specified by the CC Call...

8.1CVSS6.8AI score0.00406EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/20 10:15 a.m.21 views

CVE-2024-11494

UNSUPPORTED WHEN ASSIGNED The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP20140331 could allow an unauthenticated attacker to read some device information via a crafted HTTP HEAD method...

7.5CVSS0.00676EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/11/20 9:36 a.m.13 views

CVE-2024-11494

UNSUPPORTED WHEN ASSIGNED The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP20140331 could allow an unauthenticated attacker to read some device information via a crafted HTTP HEAD method...

7.5CVSS6.9AI score0.00676EPSS
SaveExploits1References1
CVE
CVE
added 2024/11/20 9:36 a.m.68 views

CVE-2024-11494

CVE-2024-11494 affects Zyxel P-6101C ADSL modem, specifically firmware version P-6101CSA6AP_20140331. The vulnerability is described as improper authentication that could allow an unauthenticated attacker to read certain device information via a crafted HTTP HEAD request. The CVSS 3.1 vector is N...

7.5CVSS6.9AI score0.00676EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:00 a.m.11 views

The vulnerability of the SSH and Telnet protocol implementations of the D-Link DSL6740C modem’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of SSH and Telnet protocols implemented by the microprogramming software of the D-Link DSL6740C modem lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS5.9AI score0.01363EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:00 a.m.12 views

The vulnerability of the D-Link DSL6740C modem’s microprogramming software lies in its ability to bypass security measures. This allows attackers to read arbitrary system files, obtain the device’s MAC address, and attempt to gain access to the system.

The vulnerability of D-Link DSL6740C modem’s microprogramming software is related to the possibility of bypassing security measures. Exploiting this vulnerability allows a malicious actor to read arbitrary system files, obtain the device’s MAC address, and attempt to log into the system using...

7.8CVSS5.6AI score0.01274EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:00 a.m.24 views

The vulnerability of the microprogrammed software of the D-Link DSL6740C modem, related to the lack of measures to neutralize special elements, allows a violator to execute arbitrary commands.

The vulnerability of the D-Link DSL6740C modem’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to remotely inject and execute arbitrary system...

9CVSS5.8AI score0.01787EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:00 a.m.14 views

The vulnerability of the D-Link DSL6740C modem’s microprogramming software lies in errors that occur when privileged application programming interfaces are used. This allows a perpetrator to gain access to the device.

The vulnerability of the D-Link DSL6740C modem’s microprogramming software is related to errors that occur when privileged application programming interfaces APIs are used. Exploiting this vulnerability can allow a malicious actor to gain access to the device by sending a specially crafted API...

10CVSS5.5AI score0.01166EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/11 8:15 a.m.32 views

CVE-2024-11068

The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account...

9.8CVSS0.01166EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/11 8:15 a.m.19 views

CVE-2024-11062

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet...

7.2CVSS0.01363EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/11 7:35 a.m.70 views

CVE-2024-11064

The CVE-2024-11064 entry concerns the D-Link DSL6740C modem with an OS Command Injection flaw. Public documents describe an issue in the firmware where a vulnerability in the SSH/Telnet functionality allows a remote attacker with administrator privileges to inject and execute arbitrary system com...

7.2CVSS7.5AI score0.01363EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/11 7:30 a.m.14 views

CVE-2024-11063 D-Link DSL6740C - OS Command Injection

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet...

7.2CVSS8.2AI score0.01363EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/11 7:28 a.m.41 views

CVE-2024-11062 D-Link DSL6740C - OS Command Injection

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet...

7.2CVSS0.01363EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/11 7:28 a.m.74 views

CVE-2024-11062

The CVE-2024-11062 entry concerns a OS command injection in the D-Link DSL6740C modem. The vulnerability allows remote attackers with administrator privileges to inject and execute arbitrary system commands via specific functions exposed by SSH and Telnet. Root cause per connected sources appears...

7.2CVSS7.5AI score0.01363EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.26 views

PT-2024-8176 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C modem affected versions not specified Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a...

9CVSS8.2AI score0.01363EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.15 views

PT-2024-8173 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C modem affected versions not specified Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a...

9CVSS8.2AI score0.01363EPSS
SaveExploits0References16
NVD
NVD
added 2024/11/06 3:15 a.m.38 views

CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

5.5CVSS0.00133EPSS
SaveExploits0References1
Rows per page
Query Builder