PT-2021-6234

Name of the Vulnerable Software and Affected Versions NETGEAR LAX20 versions prior to 1.1.6.28 NETGEAR MK62 versions prior to 1.1.6.122 NETGEAR MR60 versions prior to 1.1.6.122 NETGEAR MS60 versions prior to 1.1.6.122 NETGEAR R6400v2 versions prior to 1.0.4.118 NETGEAR R6700v3 versions prior to...

PT-2021-6245

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions 1.0.5.74 and earlier NETGEAR R7900P versions 1.4.2.84 and earlier NETGEAR R7960P versions 1.4.2.84 and earlier NETGEAR R8000 versions 1.0.4.74 and earlier NETGEAR R8000P versions 1.4.2.84 and earlier NETGEAR RAX200...

PT-2021-6246

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions prior to 1.0.5.74 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.74 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR RAX200 versions prior to...

PT-2021-6204

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions prior to 1.0.5.74 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.74 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR RAX200 versions prior to...

PT-2021-6208

Name of the Vulnerable Software and Affected Versions NETGEAR R7850 versions prior to 1.0.5.74 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.74 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR RAX200 versions prior to...

PT-2021-5949

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.24 NETGEAR CBR750 versions prior to 4.6.3.6 NETGEAR EAX20 versions prior to 1.0.0.58 NETGEAR EAX80 versions prior to 1.0.1.68 NETGEAR LAX20 versions prior to 1.1.6.28 NETGEAR MR60 versions prior to 1.0.6.1...

PT-2021-5873

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.24 NETGEAR CBR750 versions prior to 4.6.3.6 NETGEAR EAX20 versions prior to 1.0.0.58 NETGEAR EAX80 versions prior to 1.0.1.68 NETGEAR EX7500 versions prior to 1.0.0.74 NETGEAR LAX20 versions prior to...

PT-2021-14813

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A command injection issue exists in the Web Manager FsUnmount functionality, allowing arbitrary command execution via a specially-crafted HTTP request. An attacker can trigger this issue...

PT-2021-14814

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description An OS command injection issue exists in the Web Manager Diagnostics: Ping functionality. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an...

PT-2021-14815

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A command injection issue exists in the Web Manager SslGenerateCSR functionality, allowing arbitrary command execution via a specially-crafted HTTP request. An attacker can trigger this...

PT-2021-7546 · Hirschmann · Hirschmann Bat-C2

Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. It allows a remote attacker to execute arbitrary code by sending ...

PT-2021-14808 · Lantronix · Premierwave 2050 Firmware

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A specially-crafted HTTP request can lead to arbitrary command execution in the keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this issue. The...

Lantronix PremierWave 2050: Operating System Command Injection Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. Used to provide reliable and always-on 5G Wi-Fi connectivity, the Lantronix PremierWave 2050 version 8.9.0.0R4 is vulnerable to an operating system command injection vulnerability that can be exploited by...

PT-2021-6174

Name of the Vulnerable Software and Affected Versions NETGEAR D6220 versions prior to 1.0.0.76 Description The issue is related to a lack of input validation measures in the NETGEAR D6220 router's software, which can be exploited by an authenticated user to perform command injection. This allows ...

PT-2021-14818

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A command injection issue exists in the Web Manager SslGenerateCertificate functionality, allowing arbitrary command execution via a specially crafted HTTP request. An attacker can trigg...

CVE-2021-21874: Improper Neutralization of Special Elements used in an OS Command

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2021-6177

Name of the Vulnerable Software and Affected Versions NETGEAR R7900 versions prior to 1.0.4.38 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.68 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR RAX200 versions prior to 1.0.3.106 NETGEAR MR60 versions prior to...

PT-2021-6256

Name of the Vulnerable Software and Affected Versions NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to 1.0.4.74 NETGEAR R8000P versions prior to 1.4.2.84 NETGEAR MR60 versions prior to 1.0.6.110 NETGEAR RAX20 versions prior to...

Garrett Metal Detectors: Path traversal vulnerability

Garrett Metal Detectors is a walk-in metal detector from Garrett U.S.A. Garrett Metal Detectors is vulnerable to a path traversal vulnerability that could be exploited by remote attackers to submit special requests and execute arbitrary commands in the application context...

Imunify360 Arbitrary Command Execution

The vulnerability of the Ai-Boilt malware scanning service for Linux web servers running Imunify360 is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created malware file...