Lucene search
K

278 matches found

CNNVD
CNNVD
added 2023/09/07 12:0 a.m.2 views

ASUS RT-AX56U Formatting String Error Vulnerability

The ASUS RT-AX56U is a wireless router from Asus China. A format string error vulnerability exists in ASUS RT-AX56U version V2. The vulnerability stems from a lack of validation of a specific value in the apply.cgi module. A format string vulnerability exists, which can be exploited by an...

7.2CVSS7.6AI score0.01128EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.2 views

PT-2023-4801 · Asus · Asus Rt-Ac86U +2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U V2 affected versions not specified ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description: A format string vulnerability is identified in the General function API of the affected...

10CVSS9.4AI score0.01128EPSS
Exploits0References22
OSV
OSV
added 2023/05/23 1:15 a.m.4 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS5.8AI score0.09076EPSS
Exploits1References2
NVD
NVD
added 2023/05/23 1:15 a.m.11 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS7.4AI score0.09076EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/05/23 1:15 a.m.2 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.2CVSS5.8AI score0.09076EPSS
Exploits1References3
Prion
Prion
added 2023/05/23 1:15 a.m.15 views

Command injection

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

5.8CVSS7.3AI score0.09076EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.5 views

Linksys E2000 命令注入漏洞

The Linksys E2000 is a wireless router from Linksys, Inc. A command injection vulnerability exists in the Linksys E2000 1.0.06 firmware version, which stems from the fact that if an attacker gains web administrative privileges, he/she can inject commands into the post request parameters WLattenbb...

7.2CVSS7.2AI score0.09076EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.3 views

PT-2023-23441 · Linksys · Linksys E2000

Name of the Vulnerable Software and Affected Versions: Linksys E2000 router version 1.0.06 Description: The issue is related to a command injection vulnerability. If an attacker gains web management privileges, they can inject commands into the post request parameters WL atten bb, WL atten radio,...

7.2CVSS7.7AI score0.09076EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.17 views

CVE-2023-31740

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WLattenbb, WLattenradio, and WLattenctl in the apply.cgi interface, thereby gaining shell...

7.6AI score0.09076EPSS
Exploits1References2
CVE
CVE
added 2023/05/23 12:0 a.m.54 views

CVE-2023-31740

CVE-2023-31740 affects Linksys E2000 routers (firmware 1.0.06). A command injection in the apply.cgi interface allows an attacker with web management privileges to inject commands via WL_atten_bb, WL_atten_radio, and WL_atten_ctl in post requests, potentially granting shell privileges. Documented...

7.2CVSS7.3AI score0.09076EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/01/09 9:15 p.m.2 views

CVE-2022-43973

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...

7.2CVSS6.4AI score0.00997EPSS
Exploits1References3
Prion
Prion
added 2023/01/09 9:15 p.m.16 views

Remote code execution

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...

5.8CVSS7.2AI score0.00997EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/17 8:15 p.m.1 views

CVE-2022-31874

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

9.8CVSS5.4AI score0.18571EPSS
Exploits1References2
OSV
OSV
added 2022/06/17 8:15 p.m.2 views

CVE-2022-31874

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

9.8CVSS5.8AI score0.18571EPSS
Exploits1References1
Prion
Prion
added 2022/06/17 8:15 p.m.35 views

Command injection

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

7.5CVSS9.6AI score0.18571EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/17 7:29 p.m.12 views

CVE-2022-31874

ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface...

9.9AI score0.18571EPSS
Exploits1References1
CVE
CVE
added 2022/06/17 7:29 p.m.75 views

CVE-2022-31874

The CVE-2022-31874 entry describes an Asus RT-N53 device (firmware 3.0.0.4.376.3754) with a command injection flaw in the SystemCmd parameter of the apply.cgi interface. The vulnerability is supported by multiple sources (NVD, Red Hat, CVE list, CNNVD, etc.). Public exploitation details are not p...

9.8CVSS9.6AI score0.18571EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/17 12:0 a.m.2 views

ASUS RT-N53 命令注入漏洞

ASUS RT-N53 is a driver application from Asus Taiwan, China. A security vulnerability exists in ASUS RT-N53 version 3.0.0.4.376.3754, which originates from a command injection in the SystemCmd parameter of the apply.cgi interface...

9.8CVSS8.4AI score0.18571EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/10 9:15 p.m.2 views

CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

5.4CVSS5.8AI score0.00206EPSS
Exploits0References3
NVD
NVD
added 2022/04/10 9:15 p.m.12 views

CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

5.4CVSS0.00206EPSS
Exploits0References1
Rows per page
Query Builder