870 matches found
ABB Cylon Aspect 3.07.00 Remote Code Execution
ABB Cylon Aspect 3.07.00 networkDiagAjax.php Remote Code Execution Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.07.00 Summary: ASPECT is an award-winning scalable building energy management...
RHSA-2024:3211 Red Hat Security Advisory: traceroute security update
Bulletin has no description...
RHSA-2024:2483 Red Hat Security Advisory: traceroute security update
Bulletin has no description...
Cisco IOS XR Software UDP Packet Memory Exhaustion Vulnerability
A vulnerability in the multicast traceroute version 2 Mtrace2 feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory of an affected device. This vulnerability exists because the Mtrace2 code does not properly handle packet memory. An...
CVE-2024-20304: Missing Release of Memory after Effective Lifetime
A vulnerability in the multicast traceroute version 2 Mtrace2 feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory of an affected device. This vulnerability exists because the Mtrace2 code does not properly handle packet memory. An...
PT-2024-6055 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software versions prior to 24.2.11 Description: A vulnerability in the multicast traceroute version 2 Mtrace2 feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory of an...
CVE-2024-8078
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862B20230228. It has been declared as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to buffer overflow. The attack can be initiated remotely. NOTE: The vendor was contacted early about this...
CVE-2024-8078
CVE-2024-8078 affects TOTOLINK AC1200 T8, version 4.1.5cu.862_B20230228. The setTracerouteCfg function is vulnerable to a buffer overflow that can be exploited remotely. Multiple sources describe the issue as critical/high impact with potential arbitrary code execution or DoS, requiring no user i...
CVE-2024-8078 TOTOLINK AC1200 T8 setTracerouteCfg buffer overflow
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862B20230228. It has been declared as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to buffer overflow. The attack can be initiated remotely. NOTE: The vendor was contacted early about this...
CVE-2024-8077
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this...
CVE-2024-8077
This CVE-2024-8077 affects TOTOLINK AC1200 T8, specifically version 4.1.5cu.862_B20230228. The vulnerability is in the setTracerouteCfg function and allows OS command injection, with remote exploitation as implied by the sources. Reports consistently describe a critical impact under this function...
PT-2024-6515 · Totolink · Totolink Ac1200 T8
Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 version 4.1.5cu.862 B20230228 Description: A critical issue affects the setTracerouteCfg function, leading to os command injection. This can be exploited remotely. The vendor was contacted about this disclosure but did not...
VulnCheck KEV: CVE-2023-52028
TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setTracerouteCfg function...
The vulnerability of the Ping and Traceroute utilities in the SmartOS Wi-Fi router AdTran SRG 834-5 allows a hacker to execute arbitrary operating system commands.
The vulnerability of the Ping and Traceroute utilities in the SmartOS Wi-Fi router AdTran SRG 834-5 is related to the lack of measures taken to neutralize the special elements used in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating...
CVE-2024-31977
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility...
CVE-2024-31977
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility...
CVE-2024-31977
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility...
Adtran 834-5 操作系统命令注入漏洞
The Adtran 834-5 is a Gigabit Ethernet gateway from Adtran USA. An operating system command injection vulnerability exists in the Adtran 834-5 version 11.1.0.101-202106231430, which stems from the device allowing OS commands to be injected into the Ping or Traceroute utility via shell...
CVE-2024-31977
CVE-2024-31977 affects Adtran 834-5 devices (firmware 11.1.0.101-202106231430) with a root cause in the Ping/Traceroute utilities where shell metacharacters allow OS command injection. The vulnerability is addressed by SmartOS version 12.6.3.1 or later; SMARTOS fixes have been backported to the 1...
