PT-2021-24302

Name of the Vulnerable Software and Affected Versions: Quectel UC20 UMTS/HSPA+ version 6.3.14 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorize...

Quectel UC20 跨站脚本漏洞

The Quectel UC20 is a powerful UMTS/HSPA+ module from China Mobile Communications Quectel that provides a maximum downlink data rate of 14.4Mbps and uplink data rate of 5.76Mbps. A cross-site scripting vulnerability exists in the Quectel UC20 UMTS/HSPA+ version 6.3.14, which stems from a lack of...

CVE-2021-45815: Improper Neutralization of Input During Web Page Generation

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2021-31698

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...

CVE-2021-31698

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...

CVE-2021-31698

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...

Code injection

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...

CVE-2021-31698

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...

CVE-2021-31698

CVE-2021-31698 affects Quectel EG25-G devices through 202006130814. The vulnerability allows remote code execution by sending AT commands that place shell metacharacters in quectel_handle_fumo_cfg input processed by atfwd_daemon, potentially executing as root. Multiple sources (NVD entry and vend...

PT-2021-19476

Name of the Vulnerable Software and Affected Versions Quectel EG25-G devices through 202006130814 Description The issue allows for remote execution of arbitrary code by using an AT command to place shell metacharacters in quectel handle fumo cfg input in atfwd daemon. This can lead to code...

Quectel EG25-G 操作系统命令注入漏洞

The Quectel EG25-G is a LTE Cat 4 wireless communication module from China Mobile Telecommunications Quectel designed for M2M and IoT applications. It utilizes 3GPP Rel. 11 LTE technology and supports a maximum downlink rate of 150Mbps and a maximum uplink rate of 50Mbps. An OS command injection...

CVE-2021-31698: Improper Neutralization of Special Elements used in an OS Command

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...