CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

H3C Magic R230 Security Vulnerability

H3C Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R230 V100R002 version, which originates from the udpserver opening port 9034 allowing an attacker to execute arbitrary commands...

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

CVE-2024-38903

The H3C Magic R230 wireless router, specifically version V100R002 , is susceptible to a vulnerability where the udpserver opens port 9034 . This flaw allows an attacker to execute arbitrary commands on the device. As a temporary workaround until a formal patch is released, it is recommended to re...

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

CVE-2024-38903: Improper Neutralization of Special Elements used in a Command

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

CVE-2022-34598

The CVE-2022-34598 vulnerability affects H3C Magic R100 devices (V200R004 and V100R005) where the udpserver exposes port 9034. This misconfiguration enables attackers to execute arbitrary commands. Connected sources confirm the affected models and port, stating the issue originates from the udpse...

PT-2022-22229

Name of the Vulnerable Software and Affected Versions H3C Magic R100 versions V200R004 through V100R005 Description The issue allows attackers to execute arbitrary commands due to the udpserver having the 9034 port opened. Recommendations For versions V200R004 and V100R005, consider restricting...

CVE-2022-34598: Undefined Security Weakness

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

Command injection

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

CVE-2021-35394

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

CVE-2021-35394

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

CVE-2021-35394

Realtek Jungle SDK vulnerable versions are 2.x up to 3.4.14B. The CVE-2021-35394 issue involves the UDPServer/MP Daemon (management interface) suffering multiple memory corruption flaws and an arbitrary command injection, enabling remote unauthenticated code execution. Related connected documents...

CVE-2021-35394: Improper Neutralization of Special Elements used in an OS Command

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

PT-2021-3802

Name of the Vulnerable Software and Affected Versions Realtek Jungle SDK versions v2.x through v3.4.14B Description The diagnostic tool known as MP Daemon, typically compiled as the UDPServer binary, contains multiple memory corruption issues, including buffer overflows, and an arbitrary command...