CVE-2022-41991

Siretta QUARTZ-GOLD is affected by CVE-2022-41991: a heap-based buffer overflow in the M2M DELETE_FILE command of the QUARTZ-GOLD G5.0.1.5-210720-141020 firmware. A specially crafted UDP packet enables an unauthorized attacker to cause arbitrary command execution via a crafted rm -rf / command, a...

CVE-2022-40222

An OS command injection vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

CVE-2022-42492

CVE-2022-42492 affects Siretta QUARTZ-GOLD QUARTZ-GOLD G5.0.1.5-210720-141020. The Talos review confirms OS command injection vulnerabilities in the m2m binary, exploitable via several commands that feed unsanitized data to system("nvram set ...") during m2m_parse_router_config processing, with t...

CVE-2022-41991

A heap-based buffer overflow vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability...

CVE-2022-42493

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42493

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-40222

The CVE-2022-40222 entry maps to Siretta QUARTZ-GOLD. TALOS details show an OS command injection in the M2M DELETE_FILE path where DELETE_FILE is invoked without authentication and can execute arbitrary commands via a crafted UDP payload (M2M_data_entry.data). Affected firmware variant noted in s...

CVE-2022-42493

The CVE-2022-42493 family affects Siretta QUARTZ-GOLD: the m2m binary can execute arbitrary OS commands via UDP-triggered paths (e.g., DOWNLOAD_INFO, M2M_CONFIG_SET, DOWNLOAD_CFG_FILE, DOWNLOAD_AD) through m2m_parse_router_config without input sanitization. TALOS-2022-1640 confirms several OS com...

CVE-2022-42490

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42490

The connected Talos/Talos blog entries confirm CVE-2022-42490 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) in the M2M subsystem. The flaw is an OS command-injection in the m2m_parse_router_config path invoked by the DOWNLOAD_CFG_FILE (and related M2M commands) that does not sanitize input...

CVE-2022-42490

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42491

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42491

The CVE-2022-42491 entry applies to Siretta QUARTZ-GOLD G5.0.1.5-210720-141020, specifically the m2m binary’s M2M_CONFIG_SET command. Talos details show several OS command injection vulnerabilities arising when the m2m_parse_router_config function processes UDP data without proper sanitization, a...

CVE-2022-42491

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

Siretta QUARTZ-GOLD 缓冲区错误漏洞

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Siretta QUARTZ-GOLD 安全漏洞

The Siretta QUARTZ-GOLD is a high-speed industrial router from Siretta. A buffer overflow vulnerability exists in the Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 version that can be exploited by an attacker to execute arbitrary commands...

Siretta QUARTZ-GOLD 操作系统命令注入漏洞

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to cause arbitrary command execution by sending a crafted network reque...

PT-2023-13946 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

Siretta QUARTZ-GOLD httpd delfile.cgi directory traversal vulnerability

Talos Vulnerability Report TALOS-2022-1606 Siretta QUARTZ-GOLD httpd delfile.cgi directory traversal vulnerability January 26, 2023 CVE Number CVE-2022-40701 SUMMARY A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A...

PT-2023-13580 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: A command injection issue exists in the httpd SNMP functionality, allowing arbitrary command execution through a specially-crafted HTTP response. An attacker can trigger this iss...