CVE-2022-41013

CVE-2022-41013 affects Siretta QUARTZ-GOLD DetranCLI. TALOS reports stack-based buffer overflow vulnerabilities in the DetranCLI parser for the command template static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null). A crafted network packet can trigger an overfl...

CVE-2022-41016

CVE-2022-41016 is one of multiple stack-based buffer overflow vulnerabilities in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020’s DetranCLI command parsing. Talos’ TALOS-2022-1613 analysis confirms this family of issues affects the DetranCLI parser and documents several vulnerable command templates, ...

CVE-2022-41012

Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) is affected by CVE-2022-41012 due to stack-based buffer overflows in the DetranCLI command parsing, specifically in the templates used to handle commands like no schedule link1 etc. The vulnerabilities are in the DetranCLI parsing logic where unsafe fo...

CVE-2022-41017

CVE-2022-41017 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/NVD entries describe several stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|of...

CVE-2022-41006

CVE-2022-41006 is reported against Siretta QUARTZ-GOLD, version G5.0.1.5-210720-141020, describing multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. Talos details show that the overflow occurs in parsing templates such as the no ip static route c...

CVE-2022-41002

CVE-2022-41002 is a stack-based buffer overflow in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020, specifically in the DetranCLI command parsing. The TALOS report confirms multiple stack-overflow patterns in the DetranCLI parser that implement commands such as icmp check link and related templates, a...

CVE-2022-40999

CVE-2022-40999 corresponds to multiple stack-based buffer overflow vulnerabilities in the Siretta QUARTZ-GOLD DetranCLI command parsing. The TALOS report details a specific vulnerability class affecting the GRE index tunnel command template (gre index tunnel A.B.C.D source dest keepalive interva...

CVE-2022-41000

CVE-2022-41000 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Talos CVE report details multiple stack-based buffer overflows in the DetranCLI command parsing, enabling arbitrary command execution when a crafted network packet triggers the template for the command: no gre index tunnel ...

CVE-2022-41005

CVE-2022-41005 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflows in the DetranCLI command parsing, specifically targeting the ip static route destination … description WORD template. A crafted network packet sequence can lead to arbitrary command execution. Tal...

CVE-2022-41001

CVE-2022-41001 affects Siretta QUARTZ-GOLD with DetranCLI on version G5.0.1.5-210720-141020. Talos reports multiple stack-based buffer overflows in DetranCLI command parsing (notably icmp check link) that can be triggered by a crafted network packet to achieve arbitrary command execution. Impact ...

CVE-2022-40992

CVE-2022-40992 concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing of Siretta QUARTZ-GOLD, version G5.0.1.5-210720-141020. The overflow occurs in handling the command template no firmwall domain WORD description (WORD|null), via crafted network packets, enabling ...

CVE-2022-40991

CVE-2022-40991 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via the DetranCLI command parsing stack-based buffer overflow in the command template for firmwall domain WORD description (WORD|null) . A crafted network packet sequence can trigger a overflow leading to arbitrary command execut...

CVE-2022-40997

CVE-2022-40997 affects Siretta QUARTZ-GOLD routers (G5.0.1.5-210720-141020). The DetranCLI command parser contains stack-based buffer overflows in the gre index destination A.B.C.D/M description (WORD|null) template, which can be triggered by specially crafted network packets to achieve arbitrar...

CVE-2022-40988

Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) has stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically the ipv6 static dns WORD WORD WORD template. TALOS details show a vulnerable use of sprintf without proper bounds checking, enabling arbitrary command execut...

CVE-2022-40222

The CVE-2022-40222 entry maps to Siretta QUARTZ-GOLD. TALOS details show an OS command injection in the M2M DELETE_FILE path where DELETE_FILE is invoked without authentication and can execute arbitrary commands via a crafted UDP payload (M2M_data_entry.data). Affected firmware variant noted in s...

CVE-2022-41140

CVE-2022-41140 is a vulnerability in multiple D-Link routers (DIR-867, DIR-878, DIR-882) where the lighttpd service fails to validate the length of user-supplied data before copying to a fixed-length stack buffer. This allows network-adjacent attackers to execute arbitrary code with root privileg...

PHOENIX CONTACT PLCNext AXC F 2152 Channel Accessible By Non-Endpoint (CVE-2019-10997)

An issue was discovered on Phoenix Contact AXC F 2152 No.2404267 before 2019.0 LTS and AXC F 2152 STARTERKIT No.1046568 before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be...

online.networks.nokia.com Cross Site Scripting vulnerability OBB-3167088

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass network security checks...

PT-2023-9107 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this issue. Th...