CVE-2024-58255

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58255

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58255

CVE-2024-58255 is an OS command injection vulnerability affecting Huawei EnzoH devices (e.g., EnzoH-W5611T). The root cause, as described in CNVD, is that certain variables in a get variable are set directly without validation, enabling arbitrary command execution if exploited locally. Several so...

CVE-2024-58257

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58257

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58257

CVE-2024-58257 affects Huawei EnzoH OS by a local, high-privilege OS command injection flaw that can yield arbitrary command execution. The CVSS metrics (NVD) indicate Local access, Low attack complexity, High privileges required, no user interaction, with impact to confidentiality, integrity, an...

CVE-2024-58256

CVE-2024-58256 concerns Huawei EnzoH, reporting an OS command injection vulnerability in the EnzoH operating system. Exploitation may lead to arbitrary command execution with high impact. Documents consistently describe the issue as OS command injection affecting EnzoH; however, concrete details ...

JVN#39636188: Multiple vulnerabilities in Mubit Powered BLUE 870

Powered BLUE 870 provided by Mubit co.,ltd. contains multiple vulnerabilities listed below. OS command injection CWE-78 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Base Score 6.3 CVE-2025-54958 Path traversal CWE-22...

PT-2025-32342

Name of the Vulnerable Software and Affected Versions EnzoH affected versions not specified Description EnzoH contains an OS command injection vulnerability. Successful exploitation of this issue may lead to arbitrary command execution. Recommendations At the moment, there is no information about...

CVE-2024-58257: Exposure of Sensitive Information to an Unauthorized Actor

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2025-54958: Improper Neutralization of Special Elements used in an OS Command

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is exploited, arbitrary OS commands may be executed on the affected product...

Huawei EnzoH security vulnerabilities

Founded in 1987 and headquartered in Shenzhen, Guangdong Province, China, Huawei is a leading global provider of ICT information and communications technology infrastructure and smart terminals, with operations in more than 170 countries and regions and serving more than 3 billion people worldwid...

CVE-2024-58256: Exposure of Sensitive Information to an Unauthorized Actor

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

PT-2025-32343

Name of the Vulnerable Software and Affected Versions EnzoH affected versions not specified Description EnzoH contains an OS command injection flaw. Successful exploitation may lead to arbitrary command execution. Recommendations At the moment, there is no information about a newer version that...

CVE-2024-58255: Exposure of Sensitive Information to an Unauthorized Actor

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

PT-2025-32341

Name of the Vulnerable Software and Affected Versions EnzoH affected versions not specified Description EnzoH contains an OS command injection flaw. Successful exploitation of this flaw may lead to arbitrary command execution. Recommendations At the moment, there is no information about a newer...

CVE-2025-8697

A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function StdioServerParameters of the component MCPSessionManager/MCPTool/MCPToolkit. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-34152

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...

CVE-2025-34148

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject...

CVE-2025-34148 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject...