782 matches found
Netis Netcore Router 信息泄露漏洞
The Netis Netcore Router is a series of routers from Netis. The Netis Netcore Router suffers from an information disclosure vulnerability that stems from an unknown function in the param.file.tgz file of its Backup Handler component causing an attacker to achieve information disclosure...
CVE-2023-0113: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched...
PT-2023-10810 · Netis · Netis Netcore Router
Name of the Vulnerable Software and Affected Versions: Netis Netcore Router affected versions not specified Description: A critical vulnerability has been found in the Netis Netcore Router, affecting an unknown part. The issue leads to the use of a hard-coded password and can be initiated remotel...
Netis Netcore Router 安全漏洞
The Netis Netcore Router is a series of routers from Netis. The Netis Netcore Router has a security vulnerability that stems from the use of hard-coded passwords...
CVE-2023-0114: Cleartext Storage in a File or on Disk
A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to...
CVE-2018-25069: Use of Hard-coded Password
A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...
Netis Netcore Router 安全漏洞
The Netis Netcore Router is a series of routers from Netis. A security vulnerability exists in the Netis Netcore Router that stems from some unknown functionality in the param.file.tgz file of its Backup Handler component that results in storing data in plaintext in a file or on disk...
PT-2023-6842 · Netis · Netis Netcore Router
Name of the Vulnerable Software and Affected Versions: Netis Netcore Router affected versions not specified Description: The issue is related to the Backup Handler component of the Netis Netcore Router, specifically with the file param.file.tgz. It involves the cleartext storage of critical...
CVE-2021-26621 Netis Korea MEX01 Buffer overflow vulnerability
An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy function...
Netis Systems Netis MEX01 安全漏洞
The Netis Systems Netis MEX01 is a router from the Chinese company Netis Systems. A security vulnerability exists in Netis MEX01, which is caused by a buffer overflow vulnerability in the software. The vulnerability can be exploited by an attacker via the strcpy function that copies parameter...
netis-systems.com Cross Site Scripting vulnerability OBB-2339703
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the ping and tracert commands implemented in the web interface for managing Netis WF2419 router microprogramming software allows a perpetrator to execute arbitrary commands and gain unauthorized access to protected information.
The vulnerability of the ping and tracert commands in the web interface for managing Netis WF2419 microprogramming devices relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and gain...
Netis WF2419 Devices Remote Code Execution Vulnerability
Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page...
New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild
Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
Design/Logic Flaw
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2021-26747
The CVE-2021-26747 entry affects Netis devices: WF2780 (version 2.3.40404) and WF2411 (version 1.1.29629). The connected sources describe a vulnerability where shell metacharacters in the ping command enable remote code execution. This is the explicit attack vector and impact stated in multiple r...