Lucene search
K

6 matches found

CNVD
CNVD
added 2025/08/10 12:0 a.m.3 views

Alpine iLX-507 UPDM_wstpCBCUpdStart Function OS Command Injection Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 UPDMwstpCBCUpdStart function suffers from an operating system command injection vulnerability that stems from the failure of the UPDMwstpCBCUpdStart function to correctly filter constructed command special characters,...

6.6CVSS8.1AI score0.00719EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.3 views

The vulnerability of the UPDM_wstpCBCUpdStart() function of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code in the context of the root user.

The vulnerability of the UPDMwstpCBCUpdStart function of the Alpine iLX-507 audio system exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability can allow a hacker to execute arbitrary code under the root user’s context...

6.8CVSS7AI score0.00719EPSS
Exploits0References2
OSV
OSV
added 2025/08/01 6:15 p.m.3 views

CVE-2025-8473

Alpine iLX-507 UPDMwstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.6CVSS6.2AI score
Exploits0References1
NVD
NVD
added 2025/08/01 6:15 p.m.4 views

CVE-2025-8473

Alpine iLX-507 UPDMwstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.6CVSS0.00719EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.2 views

Alpine iLX-507 操作系统命令注入漏洞

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 UPDMwstpCBCUpdStart function suffers from an operating system command injection vulnerability that stems from the failure of the UPDMwstpCBCUpdStart function to correctly filter constructed command special characters,...

6.6CVSS6.9AI score0.00719EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/08/01 12:0 a.m.5 views

(0Day) (Pwn2Own) Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPDMwstpCBCUpdStart function. The issue results from the lack of...

6.4CVSS6.6AI score0.00719EPSS
Exploits0
Rows per page
Query Builder