CVE-2023-45467

CVE-2023-45467 affects Netis N3Mv2-V1.0.1.865. A command injection flaw exists via the ntpServIP parameter in the Time Settings. CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network access without auth, with high impact to confidentiality, integrity, and availability. No remediation ...

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...

CVE-2023-45463

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings...

PT-2023-29558 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: A command injection issue was discovered via the ntpServIP parameter in the Time Settings. This allows for potential exploitation. Recommendations: For Netis N3Mv2 version 1.0.1.865, consider...

CVE-2023-45468

Netis N3Mv2 router (version 1.0.1.865) is affected by CVE-2023-45468 due to a buffer overflow in the pingWdogIp path, which can cause a Denial of Service. Multiple sources corroborate the affected device and issue; documents describe a buffer overflow that is exploitable via crafted input. Public...

CVE-2023-45463

Summary of CVE-2023-45463 : Netis N3Mv2 firmware (v1.0.1.865) contains a buffer overflow in the hostName parameter of the FUN_0040dabc function, enabling a crafted input to trigger a Denial of Service. Affected product: Netis N3Mv2 router. Root cause: buffer overflow in hostName handling. Impact:...

NETIS SYSTEMS N3 安全漏洞

The Netis N3Mv2 is a router device. The Netis N3Mv2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service by sending a specially crafted request in the hostName parameter...

CVE-2023-45463

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45464

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45466

The CVE-2023-45466 affects Netis N3Mv2-V1.0.1.865 (router). A command injection vulnerability exists in the WPS Settings via the pin_host parameter, enabling an attacker to inject commands. CVSS 3.1 base score 9.8 (Network attack vector, low complexity, no privileges required, no user interaction...

PT-2023-29555 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a buffer overflow via the servDomain parameter, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Netis N3Mv2 version 1.0.1.865, as...

PT-2023-29554 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a buffer overflow via the hostName parameter in the FUN 0040dabc function, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Netis...

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings...

CVE-2023-45464

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...