PT-2021-19803

Name of the Vulnerable Software and Affected Versions zzzcms zzzphp versions prior to 2.0.4 Description The issue allows remote attackers to execute arbitrary OS commands. This can be achieved by placing OS commands in the keys parameter of a /location=search URI. For example, an OS command can b...

CVE-2021-3512

Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...

CVE-2021-3512

Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...

CVE-2021-30642

An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges...

CVE-2021-20711

Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

Input validation

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

CVE-2021-20708

NEC Aterm devices Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL...

PT-2021-14155

Name of the Vulnerable Software and Affected Versions: DAP-1880AC versions 1.21 and earlier Description: The issue allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program. Recommendations: For DAP-1880AC versions 1.2...

CVE-2021-20709: Improper Validation of Integrity Check Value

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

PT-2021-14167

Name of the Vulnerable Software and Affected Versions: NEC Aterm WF1200CR versions 1.3.2 and earlier NEC Aterm WG1200CR versions 1.3.3 and earlier NEC Aterm WG2600HS versions 1.5.1 and earlier Description: The issue allows authenticated attackers to execute arbitrary OS commands by sending a...

PT-2021-14168

Name of the Vulnerable Software and Affected Versions: NEC Aterm WF1200CR versions 1.3.2 and earlier NEC Aterm WG1200CR versions 1.3.3 and earlier NEC Aterm WG2600HS versions 1.5.1 and earlier Description: The issue is related to improper validation of an integrity check value, allowing an attack...

PT-2021-14170

Name of the Vulnerable Software and Affected Versions: Aterm WG2600HS firmware versions 1.5.1 and earlier Description: The issue allows an attacker to execute arbitrary OS commands via unspecified vectors. Recommendations: For Aterm WG2600HS firmware versions 1.5.1 and earlier, at the moment, the...

CVE-2021-20711: Improper Neutralization of Special Elements used in an OS Command

Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20708: Improper Neutralization of Special Elements used in an OS Command

NEC Aterm devices Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL...

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...

Command injection

Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...

Command injection

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...

PT-2021-17604

Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers versions v15.11.0.179502 CN through v15.11.0.179502 CN Tenda G1 and G3 routers version v15.11.0.169024 CN Description: The issue allows remote attackers to execute arbitrary OS commands via a crafted...

PT-2021-17603

Name of the Vulnerable Software and Affected Versions: Tenda G0 routers versions v15.11.0.55876 CN through v15.11.0.69039 CN Tenda G1 and G3 routers versions v15.11.0.169024 CN through v15.11.0.179502 CN Description: The issue allows remote attackers to execute arbitrary OS commands via a crafted...