Lucene search
+L

258 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.9 views

The vulnerability of the `remove_sniffer_raw_log()` function implementation in the Microprogramming-based VPN routers of Robustel R1510 allows a intruder to execute arbitrary commands.

The vulnerability of the removesnifferrawlog function in the Microprogramming-based VPN router software of Robustel R1510 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.1AI score0.0428EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.10 views

The vulnerability of the `clear_tools_log()` function implementation in the Microprogramming-based VPN routers of Robustel R1510 allows a hacker to execute arbitrary commands.

The vulnerability of the cleartoolslog function in the Microprogrammed VPN router software of Robustel R1510 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

10CVSS8.1AI score0.0428EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:0 a.m.11 views

The vulnerability of the `import_sdk_file()` function implementation in the microprogramming software for VPN routers of the Robustel R1510 allows a hacker to execute arbitrary commands.

The vulnerability of the importsdkfile function in the Microprogramming Software for VPN Routers of Robustel R1510 relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

10CVSS8.1AI score0.0428EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:0 a.m.7 views

The vulnerability of the `import_cert_file()` function implementation in the Microprogramming-based VPN routers of the Robustel R1510 allows a hacker to execute arbitrary commands.

The vulnerability of the importcertfile function in the Microprogramming-based VPN router software of Robustel R1510 relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.1AI score0.0428EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.12 views

The vulnerability of the config_rollback() function implementation in the Microprogrammed Software VPN Routers of Robustel R1510 allows a perpetrator to execute arbitrary commands.

The vulnerability of the configrollback function implementation in the Robustel R1510 VPN router software lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands b...

9.1CVSS8.1AI score0.0428EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/21 12:0 a.m.9 views

The vulnerability of the remove() function implementation in the Robustel R1510 VPN router software allows a intruder to execute arbitrary commands.

The vulnerability of the remove function implementation in Robustel R1510 VPN routers lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially...

9.1CVSS8.1AI score0.0428EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2022/07/13 12:0 a.m.12 views

PT-2022-5412 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 versions 3.1.16 through 3.3.0 Description: A denial of service issue exists in the web server hashFirst functionality. This can be triggered by a specially-crafted network request, allowing an attacker to cause a denial of...

7.8CVSS5.3AI score0.01011EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.9 views

The vulnerability of the Art2 command implementation in the CLISH Command Line Interface Shell of the Robustel R1510 VPN router software allows a hacker to execute arbitrary commands.

The vulnerability of the Art2 command implementation in the CLISH Command Line Interface Shell of the Robustel R1510 VPN router software is related to security flaws in the system’s mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending specially...

10CVSS8.1AI score0.02795EPSS
SaveExploits1References6Affected Software1
Talos Blog
Talos Blog
added 2022/07/05 6:28 a.m.21 views

Vulnerability Spotlight: Command injection vulnerabilities in Robustel cellular router

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered four vulnerabilities in the Robustel R1510 industrial cellular router. The R1510 is a portable router that shares 2G, 3G and 4G wireless internet access. It comes... This is...

1.9AI score
SaveExploits0
CNVD
CNVD
added 2022/07/04 12:0 a.m.18 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51424)

Robustel R1510 is an industrial VPN router from Robustel China.Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be affected by a command injection vulnerability in the /ajax/remove/ API, which...

9.8CVSS5AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.24 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51428)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...

9.8CVSS4.7AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.23 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51429)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be affected by a command injection vulnerability in the...

9.8CVSS5.1AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.18 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51423)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be vulnerable to a command injection vulnerability in the...

9.8CVSS4.9AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.17 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51422)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...

9.8CVSS4.8AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.16 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51421)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be affected by a command injection vulnerability in the...

9.8CVSS5.1AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.76 views

Robustel R1510 OS Command Injection Vulnerability

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...

9.8CVSS6.3AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.20 views

Robustel R1510 Command Execution Vulnerability

Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to a command execution vulnerability that could be exploited by an attacker to send specially crafted network requests leading to arbitrary command execution...

9.8CVSS5AI score0.02795EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.25 views

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51425)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the /ajax/setsystime/...

9.8CVSS4.8AI score0.0428EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.51 views

Robustel R1510 Input Validation Error Vulnerability

Robustel R1510 is an industrial VPN router from Robustel China.Robustel R1510 is vulnerable to an input validation error, which can be exploited by attackers to cause arbitrary file deletion by sending specially crafted network requests...

9.1CVSS5.1AI score0.35368EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/30 7:15 p.m.28 views

CVE-2022-33327

Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

9.8CVSS0.0428EPSS
SaveExploits1References1
Rows per page
Query Builder