CVE-2023-32622

The WAVLINK WL-WN531AX2 router is affected by CVE-2023-32622 (and related CVEs in the same advisory) for firmware versions prior to 2023526. The root cause is improper neutralization of special elements in the firmware, enabling an attacker with administrative privileges to execute OS commands wi...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32621

Summary of CVE-2023-32621 (WAVLINK WL-WN531AX2): The vulnerability affects WL-WN531AX2 firmware versions prior to 2023526. It enables an administrator-authenticated context to upload arbitrary files and execute OS commands with root privileges, due to a file-upload vulnerability. The issue is doc...

CVE-2023-32612

Summary (CVE-2023-32612) WAVLINK WL-WN531AX2 firmware versions prior to 2023526 are affected by a client-side enforcement of a server-side security issue (CWE-602) that could allow a logged-in administrator to execute OS commands with root privileges. Impact: root-level command execution by privi...

CVE-2023-36143

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...

Command injection

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...

CVE-2023-36143

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...

CVE-2023-36143

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...

CVE-2023-36143

The CVE-2023-36143 entry affects Maxprint Maxlink 1200G, version 3.4.11E, which exposes an OS command injection vulnerability in the device’s Diagnostic tool. The issue is caused by the ability to inject commands via the tool, allowing an attacker to execute arbitrary commands with low privileges...

CVE-2022-44720

An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot...

Command injection

An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot...

CVE-2023-26613

An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...

CVE-2023-26613

An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...

Command injection

An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...

CVE-2022-44720

An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot...

CVE-2022-44720

CVE-2022-44720 affects Weblib Ucopia prior to 6.0.13. The vulnerability is an OS command injection related to chroot in the Weblib Ucopia product. CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no auth, no user interaction required, and impacts to confidentiality, integrity, and avai...

CVE-2023-26613

The CVE-2023-26613 case affects D-Link DIR-823G (firmware 1.02B05). A command-injection flaw exists in the EXCU_SHELL endpoint that allows an unauthenticated attacker to execute OS commands via a crafted GET request, resulting in remote code execution. Multiple sources confirm the firmware and en...

PT-2023-14538 · Unknown · Weblib Ucopia

Name of the Vulnerable Software and Affected Versions: Weblib Ucopia versions prior to 6.0.13 Description: An issue in Weblib Ucopia allows OS Command Injection to occur, related to chroot. Recommendations: For versions prior to 6.0.13, update to version 6.0.13 or later to resolve the issue...

CVE-2022-44720

An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot...

CVE-2023-3450 Ruijie RG-BCR860 Network Diagnostic Page os command injection

A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public...