Lucene search
K

5 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/16 1:28 a.m.3 views

CVE-2017-20221

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages that perform administrative actions when...

6.1AI score0.00286EPSS
Exploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.5 views

PT-2026-25739

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages that perform administrative actions when...

5.3CVSS6.1AI score0.00286EPSS
Exploits2References7
CVE
CVE
added 2026/03/11 6:23 p.m.8 views

CVE-2019-25487

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability allowing unauthenticated attackers to run arbitrary system commands by posting to the formsSysCmd endpoint with the sysCmd parameter. The issue enables code execution with router privileges and has a high impact on confident...

9.8CVSS6.3AI score0.08359EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/11 6:23 p.m.3 views

CVE-2019-25487

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to...

9.8CVSS6.3AI score0.08359EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.3 views

PT-2026-24781

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to...

9.8CVSS6.3AI score0.08359EPSS
Exploits0References4
Rows per page
Query Builder