7785 matches found
CVE-2022-45719: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function...
CVE-2022-45709: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function...
CVE-2022-45718: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function...
CVE-2022-45707: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function...
CVE-2022-45720: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function...
CVE-2022-45715: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...
CVE-2022-45710: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function...
CVE-2022-45712: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function...
CVE-2022-45708: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function...
CVE-2022-45706: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...
CVE-2022-45711: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...
CVE-2022-45715
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...
CVE-2022-45712
The CVE-2022-45712 issue affects IP-COM M50 firmware version 15.11.0.33(10768). A buffer overflow is exposed via the rules parameter in the formAddDnsForward function, with CVSS 3.1 base score 9.8 (CRITICAL). Impact is listed as high on confidentiality, integrity, and availability. Practical expl...
CVE-2022-45706
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...
CVE-2022-45710
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function...
CVE-2022-45718
IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function...
CVE-2022-45714
CVE-2022-45714 affects IP-COM M50 with firmware version 15.11.0.33(10768). The vulnerability is a buffer overflow in the indexSet parameter of the formQOSRuleDel function. CVSS 3.1 base score 9.8 (CRITICAL) indicates high impact on confidentiality, integrity, and availability, exploitable over th...
PT-2022-27620 · Ip Com · Ip-Com M50
Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered in the formSetNetCheckTools function via the hostname parameter. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to th...
CVE-2022-45708
CVE-2022-45708 affects IP-COM M50, version V15.11.0.33(10768). A vulnerability in the formDelPortMapping function’s sPortMapIndex parameter enables a buffer overflow. Impacted components include the port-mapping logic (buffer overflow) with potential baseline CVSS v3.1 score of 9.8 (CRITICAL) and...