CVE-2023-45465

The CVE-2023-45465 entry affects Netis N3Mv2 device (version V1.0.1.865): a command injection vulnerability via the ddnsDomainName parameter in Dynamic DNS settings. Root cause: unsafely handling input in Dynamic DNS configuration enables arbitrary command execution, with attack vector over the n...

PT-2023-29559

Name of the Vulnerable Software and Affected Versions Netis N3Mv2 version 1.0.1.865 Description The issue is a buffer overflow that can be triggered via the pingWdogIp. This allows attackers to cause a Denial of Service DoS by providing a crafted input. Recommendations For version 1.0.1.865,...

CVE-2023-45464

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45463

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

NETIS SYSTEMS N3 安全漏洞

The Netis N3Mv2 is a router device. The Netis N3Mv2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service by sending a specially crafted request...

PT-2023-29554 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a buffer overflow via the hostName parameter in the FUN 0040dabc function, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Netis...

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings...

CVE-2023-45464

CVE-2023-45464 affects Netis N3Mv2 with version 1.0.1.865. A buffer overflow in the servDomain parameter allows crafted input to trigger a Denial of Service. The CVSSv3.1 base score is 7.5 (Network, Low complexity, No privileges, UI none; Availability impact). Public references consistently descr...

NETIS SYSTEMS N3 Security Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS N3 Mv2-V1.0.1.865 version, which stems from a buffer overflow vulnerability contained via the servDomain parameter, allowing an attacker to cause a denial of service DoS via crafted input...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

PT-2023-29557 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: A command injection issue was discovered via the pin host parameter in the WPS Settings, allowing for potential exploitation. Recommendations: For Netis N3Mv2 version 1.0.1.865, consider restricting...

CVE-2023-45468

Netis N3Mv2 router (version 1.0.1.865) is affected by CVE-2023-45468 due to a buffer overflow in the pingWdogIp path, which can cause a Denial of Service. Multiple sources corroborate the affected device and issue; documents describe a buffer overflow that is exploitable via crafted input. Public...

PT-2023-29556 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: A command injection issue was discovered via the ddnsDomainName parameter in the Dynamic DNS settings. This allows for potential exploitation. No information is provided about the estimated number of...

NETIS SYSTEMS N3 Operating System Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS N3 Mv2-V1.0.1.865 version, which stems from a command injection vulnerability that includes the ntpServIP parameter via the time setting...

CVE-2023-45463

Summary of CVE-2023-45463 : Netis N3Mv2 firmware (v1.0.1.865) contains a buffer overflow in the hostName parameter of the FUN_0040dabc function, enabling a crafted input to trigger a Denial of Service. Affected product: Netis N3Mv2 router. Root cause: buffer overflow in hostName handling. Impact:...

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-45467

CVE-2023-45467 affects Netis N3Mv2-V1.0.1.865. A command injection flaw exists via the ntpServIP parameter in the Time Settings. CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network access without auth, with high impact to confidentiality, integrity, and availability. No remediation ...