Siretta QUARTZ-GOLD OS Command Injection Vulnerability (CNVD-2023-17084)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to OS command injection, which can be exploited by attackers to cause arbitrary commands to be executed by sending crafted HTTP requests...

PT-2023-14122 · Unknown · Freshtomato

Name of the Vulnerable Software and Affected Versions: FreshTomato version 2022.5 Description: A specially crafted HTTP request can lead to arbitrary command execution due to an OS command injection vulnerability in the httpd logs/view.cgi functionality. This allows an attacker to send an HTTP...

CVE-2022-42490

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-40222

An OS command injection vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

Vulnerability Spotlight: OS command injection, directory traversal and other vulnerabilities found in Siretta Quartz-Gold and FreshTomato

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered several vulnerabilities in the Siretta Quartz-Gold router. Talos also discovered vulnerabilities in FreshTomato while investigating the Siretta router. The Siretta Quartz-Gold is an industrial...

CVE-2022-40969

CVE-2022-40969 (Siretta QUARTZ-GOLD) is a OS command injection vulnerability in the httpd delfile.cgi file-management endpoint. Talos reports that the delfile.cgi handler accepts a parameter named _filename, appends it to a base folder path, and then executes rm -rf / via system(), with the filen...

CVE-2022-40220

Cisco Talos details CVE-2022-40220: OS command injection in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 via httpd txt/restore.cgi. The vulnerability arises when nvram key/value lines from the request body are parsed and fed to system() without validation, enabling arbitrary command execution. TALO...

CVE-2022-40220

An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-38066

An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

CVE-2022-38066

CVE-2022-38066 is an OS command injection in Siretta QUARTZ-GOLD’s httpd SNMP feature. Talos reports a vulnerability in QUARTZ-GOLD G5.0.1.5-210720-141020 where the SNMP daemon reads custom OIDs that map to exec entries in /etc/snmpd.conf. An unauthenticated or authenticated attacker can trigger ...

CVE-2022-42492

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42492

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42493

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42493

The CVE-2022-42493 family affects Siretta QUARTZ-GOLD: the m2m binary can execute arbitrary OS commands via UDP-triggered paths (e.g., DOWNLOAD_INFO, M2M_CONFIG_SET, DOWNLOAD_CFG_FILE, DOWNLOAD_AD) through m2m_parse_router_config without input sanitization. TALOS-2022-1640 confirms several OS com...

CVE-2022-40222

The CVE-2022-40222 entry maps to Siretta QUARTZ-GOLD. TALOS details show an OS command injection in the M2M DELETE_FILE path where DELETE_FILE is invoked without authentication and can execute arbitrary commands via a crafted UDP payload (M2M_data_entry.data). Affected firmware variant noted in s...

CVE-2022-42490

The connected Talos/Talos blog entries confirm CVE-2022-42490 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) in the M2M subsystem. The flaw is an OS command-injection in the m2m_parse_router_config path invoked by the DOWNLOAD_CFG_FILE (and related M2M commands) that does not sanitize input...

CVE-2022-42491

The CVE-2022-42491 entry applies to Siretta QUARTZ-GOLD G5.0.1.5-210720-141020, specifically the m2m binary’s M2M_CONFIG_SET command. Talos details show several OS command injection vulnerabilities arising when the m2m_parse_router_config function processes UDP data without proper sanitization, a...

Siretta QUARTZ-GOLD m2m DELETE_FILE cmd OS command injection vulnerability

Talos Vulnerability Report TALOS-2022-1638 Siretta QUARTZ-GOLD m2m DELETEFILE cmd OS command injection vulnerability January 26, 2023 CVE Number CVE-2022-40222 SUMMARY An OS command injection vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-14102...

PT-2023-14125 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue concerns OS command injection vulnerabilities in the m2m binary. A specially-crafted network request can lead to arbitrary command execution. An attacker can exploit th...

FreshTomato httpd logs/view.cgi OS command injection vulnerability

Talos Vulnerability Report TALOS-2022-1641 FreshTomato httpd logs/view.cgi OS command injection vulnerability January 26, 2023 CVE Number CVE-2022-42484 SUMMARY An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP...