Lucene search
+L

4526 matches found

NVD
NVD
added 2023/05/23 1:15 a.m.31 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS7.4AI score0.02354EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/23 1:15 a.m.48 views

CVE-2023-31741

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.3AI score0.02354EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/23 1:15 a.m.18 views

CVE-2023-31741

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.1AI score0.02354EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/23 1:15 a.m.22 views

Command injection

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

5.8CVSS7.3AI score0.02354EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/05/23 1:15 a.m.24 views

Command injection

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

5.8CVSS7.3AI score0.02354EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/23 12:0 a.m.12 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

8.1AI score0.02354EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.55 views

CVE-2023-31741

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.6AI score0.02354EPSS
SaveExploits1References1
CVE
CVE
added 2023/05/23 12:0 a.m.65 views

CVE-2023-31740

CVE-2023-31740 affects Linksys E2000 routers (firmware 1.0.06). A command injection in the apply.cgi interface allows an attacker with web management privileges to inject commands via WL_atten_bb, WL_atten_radio, and WL_atten_ctl in post requests, potentially granting shell privileges. Documented...

7.2CVSS7.3AI score0.02354EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/23 12:0 a.m.12 views

CVE-2023-31741

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.8AI score0.02354EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.8 views

PT-2023-23441 · Linksys · Linksys E2000

Name of the Vulnerable Software and Affected Versions: Linksys E2000 router version 1.0.06 Description: The issue is related to a command injection vulnerability. If an attacker gains web management privileges, they can inject commands into the post request parameters WL atten bb, WL atten radio,...

7.2CVSS7.7AI score0.02354EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.19 views

PT-2023-23442 · Linksys · Linksys E2000

Name of the Vulnerable Software and Affected Versions: Linksys E2000 router version 1.0.06 Description: The issue is a command injection vulnerability. If an attacker gains web management privileges, they can inject commands into the post request parameters wl ssid, wl ant, wl rate, WL atten ctl,...

7.2CVSS7.7AI score0.02354EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.38 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.6AI score0.02354EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/22 8:15 p.m.7 views

CVE-2023-31245

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redire...

6.1CVSS6.5AI score0.0039EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/22 8:15 p.m.27 views

CVE-2023-31245

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redire...

7.1CVSS7AI score0.0039EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/05/22 7:37 p.m.9 views

CVE-2023-31245

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redire...

7.1CVSS6.9AI score0.0039EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/22 5:15 p.m.8 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS5.8AI score0.09075EPSS
SaveExploits1References2
NVD
NVD
added 2023/05/22 5:15 p.m.28 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.3AI score0.09075EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/22 5:15 p.m.25 views

Command injection

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

5.8CVSS7.3AI score0.09075EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/05/22 4:15 p.m.7 views

CVE-2023-2588

Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell SSH/web management services over the cloud proxy. A user can request a web proxy and obtain a URL in the Remote Management System cloud subdomain. This URL cou...

8.8CVSS8.1AI score0.01121EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/22 4:15 p.m.16 views

Remote code execution

Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell SSH/web management services over the cloud proxy. A user can request a web proxy and obtain a URL in the Remote Management System cloud subdomain. This URL cou...

6.8CVSS9.3AI score0.01121EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder