PT-2024-10856 · Circontrol · Circontrol Raption

Name of the Vulnerable Software and Affected Versions: Circontrol Raption versions 5.11.2 and earlier Description: The issue is a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging...

Exploit for OS Command Injection in Lg Webos

Root my webOS TV A simple python script that starts a telnet...

PT-2024-2871 · Juniper Networks · Paragon Active Assurance Control Center

Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance Control Center versions 4.1.0 through 4.2.0 Description: The issue allows a network-adjacent attacker with root access to a Test Agent Appliance to access sensitive information about downstream device...

The vulnerability in the implementation of the NETCONF protocol for Cisco IOS XE allows a attacker to elevate their privileges to the root level.

The vulnerability of the NETCONF protocol implementation in Cisco IOS XE operating systems is related to the use of an incomplete blacklist when processing input data. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...

CVE-2023-6319

A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to...

CVE-2023-6318

A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger...

Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

Multiple security vulnerabilities have been disclosed in LG webOS running on its smart televisions that could be exploited to bypass authorization and gain root access on the devices. The findings come from Romanian cybersecurity firm Bitdefender, which discovered and reported the flaws in Novemb...

CVE-2023-1082

An remote attacker with low privileges can perform a command injection which can lead to root access...

CVE-2023-1082 Welotec: Command injection vulnerability in TK500v1 router series

An remote attacker with low privileges can perform a command injection which can lead to root access...

CVE-2023-1082 Welotec: Command injection vulnerability in TK500v1 router series

An remote attacker with low privileges can perform a command injection which can lead to root access...

CVE-2023-1082

CVE-2023-1082 affects Welotec TK500/ TK500v1 router series. A remote attacker with low privileges can perform a command injection that may lead to root access. Public documentation in multiple feeds confirms the vulnerability exists in industrial routers and describes the impact as remote command...

PT-2024-11933 · Welotec · Tk515L +13

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A remote attacker with low privileges can perform a command injection, potentially leading to root access. Recommendations: At the moment, there is no...

A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump and dump privileged information.

...

PT-2024-5339 · Adtran +1 · Adtran 834-5 +1

Name of the Vulnerable Software and Affected Versions: AdTran 834-5 HDC17600021F1 SmartOS versions 11.1.1.1 through 12.5.5.0 Description: The issue concerns a hidden, undocumented, hard-coded support account in AdTran 834-5 devices, whose password is based on the device's MAC address. Since all...

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming software arises from the lack of measures taken to eliminate special elements used in the operating system’s command set. This vulnerability allows a hacker to execute arbitrary code in the root user context.

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root user’s...

PT-2024-5340 · Adtran · Adtran Srg 834-5

Name of the Vulnerable Software and Affected Versions: AdTran SRG 834-5 devices with SmartOS versions prior to 12.1.3.1 Description: The issue is related to the use of hardcoded credentials in the SSH service of the affected devices. This allows a remote attacker to execute arbitrary operating...

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming system lies in the ability to write code outside the buffer, allowing a hacker to execute arbitrary code in the context of the root user.

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming software is related to the writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user, as a result of processing DHCP options...

PT-2024-21910 · Dnf5 · Dnf5

Name of the Vulnerable Software and Affected Versions: dnf5 affected versions not specified Description: The issue arises from the dnf5 D-Bus daemon accepting arbitrary configuration parameters from unprivileged users. This allows a local root exploit by tricking the daemon into loading a...

CVE-2024-27981

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers Linux with UniFi Network Application Version 8.0.28 and earlier allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device. Affected Products:...

CVE-2023-3454

Remote code execution RCE vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch...