CVE-2025-1448

A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The...

CVE-2025-1448 Synway SMG Gateway Management Software 9-12ping.php command injection

A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The...

CVE-2025-1448 Synway SMG Gateway Management Software 9-12ping.php command injection

A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The...

CVE-2025-1448

CVE-2025-1448 affects Synway SMG Gateway Management Software up to 20250204. The issue is in the handling of the file 9-12ping.php, where the retry parameter can be manipulated to trigger a command-injection vulnerability. Exploitation can be remote; public PoCs exist. Remediation details are lim...

CVE-2025-1448: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The...

The vulnerability of the Eltex SMG-1016M router’s microprogramming software arises from the lack of measures to neutralize special elements, allowing a intruder to execute arbitrary codes.

The vulnerability of the Eltex SMG-1016M router’s microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

PT-2024-10545 · Eltex · Eltex Smg-1016M

Name of the Vulnerable Software and Affected Versions: Eltex SMG-1016M affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements in the Eltex SMG-1016M trunk gateway's firmware. Exploitation of this issue may allow a remote attacker t...

smg-abogados.com Cross Site Scripting vulnerability OBB-3233561

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-30651

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access...

Design/Logic Flaw

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access...

CVE-2021-30651

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access...

CVE-2021-30651

CVE-2021-30651 relates to Broadcom Symantec Messaging Gateway (SMG). An authenticated SMG administrator can obtain passwords for external LDAP/Active Directory servers, representing an information disclosure vulnerability. The NVD entry records network access with authenticated, low complexity co...

PT-2022-10021 · Smg · Smg

Name of the Vulnerable Software and Affected Versions: SMG affected versions not specified Description: A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access. Recommendations: At the...

OpenSSL Vulnerabilities Sep 2020 - Feb 2021

Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A remote attacker may be able to decrypt encrypted communication from an SSL/TLS connection, downgrade a newly established SSL/TLS connection to SSLv2,...

CVE-2020-12594

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4...

CVE-2020-12594

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4...

Privilege escalation

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4...

CVE-2020-12595

CVE-2020-12595 concerns Symantec Messaging Gateway (SMG). The vulnerability is an information disclosure in which a malicious, authenticated, privileged web UI user can obtain the password for a remote SCP backup server they would not normally access. Affects SMG before version 10.7.4. Connected ...

CVE-2020-12595

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...

CVE-2020-12594

CVE-2020-12594 affects Symantec Messaging Gateway (SMG) appliances prior to version 10.7.4. The issue is a privilege-escalation vulnerability: an authenticated, privileged CLI user can elevate privileges to gain full control over the SMG system. Affected component/condition: CLI access within SMG...