29 matches found
CVE-2019-15528: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...
CVE-2019-13128
An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...
Command injection
An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...
CVE-2019-13128
CVE-2019-13128 affects D-Link DIR-823G devices with firmware 1.02B03. The issue is a command injection in HNAP1 exploitable with Authentication , via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings . Public details report the impact as arbitrary command execution ...
CVE-2019-9119
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...
CVE-2019-9119
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...
Command injection
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...
CVE-2019-9119
CVE-2019-9119 affects Motorola C1 and M2 routers (firmware 1.01 and 1.07). It is a Command Injection vulnerability where a crafted /HNAP1 POST can trigger system() with untrusted input in SetStaticRouteSettings (staticroute_list), enabling remote execution of arbitrary OS commands and a root shel...
CVE-2019-9119: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...