The vulnerability in the software web interface for Cisco Webex Meetings allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of Cisco Webex Meetings software’s web interface is related to the lack of measures taken to protect the website structure during the processing of Webex Events classic applications. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks a...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

Command injection

A remote command execution RCE vulnerability in the web interface component of Furukawa Electric LatAM 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 allows unauthenticated attackers to send arbitrary commands to the device via unspecified vectors...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

CVE-2021-37384

CVE-2021-37384 affects Furukawa ONU models with vulnerable web interface components (e.g., Furukawa 423-41W/AC before 1.1.4 and LD421-21W before 1.3.3). The root cause is a Remote Code Execution via the web interface that allows unauthenticated remote command execution. Impact is high (as indicat...

PT-2023-5482 · Advantech · Eki-1522 +2

Name of the Vulnerable Software and Affected Versions: Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 Description: The issue is related to a Stored Cross-Site Scripting vulnerability. This vulnerability can be triggered by authenticated users in the ping tool of the web-interface. Th...

Cudy Technology LT400 跨站脚本漏洞

The Cudy Technology LT400 is a wireless router from the Chinese company Cudy Technology. A security vulnerability exists in the Cudy Technology LT400 version 1.13.4, which originates from a security issue in the icon parameter in /cgi-bin/luci/admin/network/bandwidth...

PT-2023-5481 · Advantech · Eki-1522 +2

Name of the Vulnerable Software and Affected Versions: Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 Description: The issue is related to a Stored Cross-Site Scripting vulnerability. This vulnerability can be triggered by authenticated users in the device name field of the...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

PT-2023-12317 · Furukawa · Furukawa Ld421-21W +2

Name of the Vulnerable Software and Affected Versions: Furukawa ONU models affected versions not specified Furukawa 423-41W/AC versions prior to 1.1.4 Furukawa LD421-21W versions prior to 1.3.3 Description: A Remote Code Execution RCE vulnerability was found, allowing remote unauthenticated users...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38378

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

Default credentials

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

Code injection

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

PT-2023-26389 · Rigol · Rigol Mso5000

Name of the Vulnerable Software and Affected Versions: RIGOL MSO5000 digital oscilloscope version 00.01.03.00.03 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the "webcontrol changepwd.cgi" application. This is a problem with the web...

CVE-2023-38378

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38379

The CVE concerns RIGOL MSO5000 (firmware 00.01.03.00.03). The web interface’s webcontrol changepwd.cgi allows remote admin password changes because the entered password only must match the first zero characters of the saved password (zero-length password check). Impact is remote admin credential ...