3253 matches found
CVE-2022-44149
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required...
CVE-2022-44149: Improper Neutralization of Special Elements used in an OS Command
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required...
PT-2023-14431
Name of the Vulnerable Software and Affected Versions: Nexxt Amp300 ARN02304U8 version 42.103.1.5095 Nexxt Amp300 ARN02304U8 version 80.103.2.5045 Description: The web service on Nexxt Amp300 ARN02304U8 devices allows remote OS command execution by placing in the JSON host field to the "ping"...
CVE-2022-40005
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...
CVE-2022-40005
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...
Command injection
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...
CVE-2022-40005
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...
CVE-2022-40005
The Intelbras WiFiber 120AC inMesh wireless router is vulnerable to command injection in versions prior to 1-1-220826 . This vulnerability can be exploited by authenticated users via the /boaform/formPing6 and /boaform/formTracert URIs used for ping and traceroute functions. Successful exploitati...
VulnCheck KEV: CVE-2022-30023
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function...
SOUND4 IMPACT/FIRST/PULSE/Eco 2.x ICMP Flood Attack
SOUND4 IMPACT/FIRST/PULSE/Eco =2.x ping/traceroute ICMP Flood Attack Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco 1.16...
undertow: Double AJP response for 400 from EAP 7 results in CPING failures
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (ping/traceroute) ICMP Flood Attack
Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...
CVE-2022-45005
IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the cmdgetpingoutput function...
IP-COM EW9 操作系统命令注入漏洞
The IP-COM EW9 is a wireless router from IP-COM. An operating system command injection vulnerability exists in the IP-COM EW9 version V15.11.0.149732, which stems from a command injection vulnerability in the cmdgetpingoutput function...
CVE-2022-45005
IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the cmdgetpingoutput function...
CVE-2022-45996
Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...
Tenda W20E 操作系统命令注入漏洞
The Tenda W20E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W20E version V16.01.0.63392, which originates from a command injection vulnerability via cmdgetpingoutput...
PT-2022-27713 · Tenda · Tenda W20E
Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to command injection via cmd get ping output. Recommendations: For Tenda W20E version 16.01.0.63392, consider restricting access to the cmd get ping output command until a pat...