CVE-2025-29269

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...

CVE-2025-29268

The ALLNET ALL-RUT22GW wireless router (version 3.3.8 ) is vulnerable to the use of hardcoded credentials . These credentials are stored within the libicos.so library, which could potentially be exposed to attackers. Remediation requires updating the device to a newer version that no longer conta...

CVE-2025-29269: Improper Neutralization of Special Elements used in an OS Command

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...

PT-2025-49121

Name of the Vulnerable Software and Affected Versions ALLNET ALL-RUT22GW version 3.3.8 Description The ALLNET ALL-RUT22GW software contains an OS command injection issue. This occurs through the command parameter within the ''popen.cgi'' endpoint, allowing for potential unauthorized system access...

CVE-2025-29268: Use of Hard-coded Credentials

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...