PT-2021-6174

Name of the Vulnerable Software and Affected Versions NETGEAR D6220 versions prior to 1.0.0.76 Description The issue is related to a lack of input validation measures in the NETGEAR D6220 router's software, which can be exploited by an authenticated user to perform command injection. This allows ...

PT-2021-5949

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.24 NETGEAR CBR750 versions prior to 4.6.3.6 NETGEAR EAX20 versions prior to 1.0.0.58 NETGEAR EAX80 versions prior to 1.0.1.68 NETGEAR LAX20 versions prior to 1.1.6.28 NETGEAR MR60 versions prior to 1.0.6.1...

CVE-2021-21883: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2021-21882: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2021-7546 · Hirschmann · Hirschmann Bat-C2

Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. It allows a remote attacker to execute arbitrary code by sending ...

CVE-2021-21888: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this...

PT-2021-6245

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions 1.0.5.74 and earlier NETGEAR R7900P versions 1.4.2.84 and earlier NETGEAR R7960P versions 1.4.2.84 and earlier NETGEAR R8000 versions 1.0.4.74 and earlier NETGEAR R8000P versions 1.4.2.84 and earlier NETGEAR RAX200...

Lantronix PremierWave 2050: Operating System Command Injection Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. Used to provide reliable and always-on 5G Wi-Fi connectivity, the Lantronix PremierWave 2050 version 8.9.0.0R4 is vulnerable to an operating system command injection vulnerability that can be exploited by...

PT-2021-6234

Name of the Vulnerable Software and Affected Versions NETGEAR LAX20 versions prior to 1.1.6.28 NETGEAR MK62 versions prior to 1.1.6.122 NETGEAR MR60 versions prior to 1.1.6.122 NETGEAR MS60 versions prior to 1.1.6.122 NETGEAR R6400v2 versions prior to 1.0.4.118 NETGEAR R6700v3 versions prior to...

PT-2021-6204

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions prior to 1.0.5.74 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.74 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR RAX200 versions prior to...

PT-2021-6208

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions prior to 1.0.5.74 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.74 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR RAX200 versions prior to...

PT-2021-5873

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.24 NETGEAR CBR750 versions prior to 4.6.3.6 NETGEAR EAX20 versions prior to 1.0.0.58 NETGEAR EAX80 versions prior to 1.0.1.68 NETGEAR EX7500 versions prior to 1.0.0.74 NETGEAR LAX20 versions prior to...

PT-2021-14818

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A command injection issue exists in the Web Manager SslGenerateCertificate functionality, allowing arbitrary command execution via a specially crafted HTTP request. An attacker can trigg...

PT-2021-14814

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description An OS command injection issue exists in the Web Manager Diagnostics: Ping functionality. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an...

PT-2021-14815

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A command injection issue exists in the Web Manager SslGenerateCSR functionality, allowing arbitrary command execution via a specially-crafted HTTP request. An attacker can trigger this...

CVE-2021-21874: Improper Neutralization of Special Elements used in an OS Command

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2021-21872: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2021-14813

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A command injection issue exists in the Web Manager FsUnmount functionality, allowing arbitrary command execution via a specially-crafted HTTP request. An attacker can trigger this issue...

CVE-2021-21884: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2021-21877: Improper Neutralization of Special Elements used in an OS Command

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability...