578 matches found
CVE-2021-31576
CVE-2021-31576 affects Boa and involves a missing permission check that enables remote information disclosure to a proximal attacker with no additional execution privileges required. Descriptions across multiple sources (NVD, Red Hat, PRION, CVE listings) consistently report: vulnerability arises...
CVE-2021-31578
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...
CVE-2021-31576
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB001232...
CVE-2021-31577
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...
CVE-2021-31577
The connected records confirm CVE-2021-31577 affects Boa, caused by a missing permission check that allows remote privilege escalation from a proximal attacker without extra privileges or user interaction. The vulnerability is treated as a high-severity issue (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:...
PT-2023-12152 · Boa · Boa
Name of the Vulnerable Software and Affected Versions: Boa affected versions not specified Description: The issue is related to a possible escalation of privilege due to a stack buffer overflow in Boa. This could lead to remote escalation of privilege from a proximal attacker with no additional...
CVE-2021-31578
CVE-2021-31578 affects Boa and involves a stack buffer overflow. The consequence is remote escalation of privilege from a nearby attacker with no required privileges and no user interaction. The issue is attributed to Boa’s handling of stack buffers, enabling a proximal attacker to elevate privil...
CVE-2022-32665
In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124...
CVE-2022-32665
In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124...
Command injection
In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124...
PT-2023-13116 · Boa · Boa
Name of the Vulnerable Software and Affected Versions: Boa affected versions not specified Description: The issue is related to improper input validation, which could lead to a command injection. This might result in remote escalation of privilege without requiring additional execution privileges...
CVE-2022-32665
CVE-2022-32665 (Boa) : The available connected documents describe a command-injection vulnerability in Boa caused by improper input validation, enabling remote privilege escalation without additional execution privileges and with no user interaction required. The issue affects Boa components hand...
MediaTek 命令注入漏洞
MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation in Boa, which may result in command injection, which could lead to remote privilege escalation without addition...
CVE-2022-32665
In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124...
The vulnerability in the implementation of the /cgi-bin/wapopen HTTP-server Boa allows a hacker to gain unauthorized access to protected information.
The vulnerability in the /cgi-bin/wapopen HTTP-server implementation of Boa is related to incorrect restrictions on the path to the restricted directory during processing of the FILECAMERA variable. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected...
The vulnerability of the Boa HTTP server’s files backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js allows a intruder to gain unauthorized access to protected information.
The vulnerabilities of the Boa HTTP server’s files backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js are related to configuration errors. Exploiting these vulnerabilities can allow an attacker operating remotely to gain unauthorized access to protected...
VulnCheck KEV: CVE-2018-20057
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
