944 matches found
VulnCheck KEV: CVE-2020-10173
Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...
Beeline Smart Box Operating System Command Injection Vulnerability
The Beeline Smart Box is a wireless router from the Russian company Beeline. A security vulnerability exists in Beeline Smart Box version 2.0.38. An attacker can exploit this vulnerability via the 'Ping pingipaddr', 'Nslookup nslookupipaddr' or 'Traceroute tracerouteipaddr' parameters to execute...
CVE-2020-12246
Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...
Command injection
Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...
CVE-2020-12246
Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...
CVE-2020-12246: Improper Neutralization of Special Elements used in an OS Command
Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...
PT-2020-13070
Name of the Vulnerable Software and Affected Versions Beeline Smart Box version 2.0.38 Description The issue allows OS command injection via the "Advanced settings Other Diagnostics" feature. Specifically, it affects the ping ipaddr parameter in the Ping function, the nslookup ipaddr parameter in...
NETGEAR XR500 Code Execution Vulnerability
The NETGEAR XR500 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR XR500 versions prior to 2.3.2.32. The vulnerability can be exploited by an attacker to execute code via the traceroute handler...
CVE-2018-21117
NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...
CVE-2018-21117
NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...
Remote code execution
NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...
CVE-2018-21117
The CVE-2018-21117 issue affects NETGEAR XR500 routers (firmware versions before 2.3.2.32). The vulnerability allows remote code execution via the traceroute handler by unauthenticated attackers, with impact on confidentiality, integrity, and availability. Affected entries consistently state pre-...
CVE-2018-21117
NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...
CVE-2018-21117: Undefined Security Weakness
NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...
PT-2020-8761
Name of the Vulnerable Software and Affected Versions NETGEAR XR500 versions prior to 2.3.2.32 Description The issue allows remote code execution by unauthenticated attackers via the traceroute handler. Recommendations For versions prior to 2.3.2.32, update to version 2.3.2.32 or later to resolve...
PT-2020-3074
Name of the Vulnerable Software and Affected Versions RouterOS affected versions not specified Description The issue is related to a buffer overflow in the Traceroute service of RouterOS, used in MikroTik routers. This can be exploited by a remote attacker, who can cause a denial of service by...
Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution
Exploit Title: Pandora FMS 7.0NG - 'nettools.php' Remote Code Execution Build: PC170324 - MR 0 Date: 2020-03-30 Exploit Author: Basim Alabdullah Vendor homepage: http://pandorafms.org/ Version: 7.0 Software link: https://pandorafms.org/features/free-download-monitoring-software/ Tested on: CentOS...
Comtrend VR-3033 Command Injection Vulnerability
The Comtrend VR-3033 is a high power 802.11n 300Mbps single line VDSL router. The Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m suffers from a command injection vulnerability. A remote authenticated attacker could exploit this vulnerability via the ping and traceroute diagnostic pages to ta...
CVE-2020-10173
Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...
CVE-2020-10173
Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...