CVE-2020-5179

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech password fo...

Design/Logic Flaw

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech password fo...

CVE-2020-5179

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech password fo...

CVE-2020-5179

Comtech Stampede FX-1010, version 7.4.3, is affected by CVE-2020-5179. Remote authenticated administrators can execute arbitrary OS commands by visiting the Diagnostics Ping page and submitting shell metacharacters in the Target IP address field. The underlying issue is an input validation/authen...

PT-2020-18285

Name of the Vulnerable Software and Affected Versions Comtech Stampede FX-1010 version 7.4.3 Description The issue allows remote authenticated administrators to execute arbitrary OS commands. This can be achieved by navigating to the Diagnostics Ping page and entering shell metacharacters in the...

CVE-2020-5179: Improper Neutralization of Special Elements used in an OS Command

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech password fo...

CVE-2019-17667

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

CVE-2019-17667

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

Cross site scripting

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

CVE-2019-17667

Summary of CVE-2019-17667 : Affected product is the Comtech H8 Heights Remote Gateway, version 2.5.1. The cited issue is an XSS/HTML injection vulnerability exposed through the SiteName field. The connected PT-2019-15246 entry confirms the affected software/versions and provides a concrete remedi...

CVE-2019-17667

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

CVE-2019-17667: Improper Neutralization of Input During Web Page Generation

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

PT-2019-15246

Name of the Vulnerable Software and Affected Versions Comtech H8 Heights Remote Gateway version 2.5.1 Description The issue allows for XSS and HTML injection attacks through the SiteName field. Recommendations For Comtech H8 Heights Remote Gateway version 2.5.1, avoid using the SiteName field unt...

comtech.ch XSS vulnerability

Vulnerable URL: http://www.comtech.ch/suche.php?s=%22%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...