EUVD-2021-24036

Malware in sbrugna...

EUVD-2022-42515

Malicious code in bioql PyPI...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

Ericsson Cradlepoint NetCloud Exchange 安全漏洞

Ericsson Cradlepoint NetCloud Exchange NCX is a unified WAN networking and security architecture from Ericsson, Sweden. A security vulnerability exists in Ericsson Cradlepoint NetCloud Exchange version 1.110.50, which stems from the presence of an insecure file and folder permissions vulnerabilit...

The vulnerability in the built-in operating system Cradlepoint NetCloud (NCOS) arises from insufficient validation of arguments passed in commands, allowing a malicious actor to execute arbitrary code.

The vulnerability of the built-in operating system Cradlepoint NetCloud NCOS is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary code by rebooting the device and accessing the BIOS...

CVE-2022-3086

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code...

CVE-2022-3086

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code...

Code injection

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code...

CVE-2022-3086

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to a shell-escape command-injection that allows local attackers with non-superuser credentials to gain full shell access and potentially execute arbitrary code. Affected product: Cradlepoint IBR600 NCOS (NETCLOUD OS) up to 6....

CVE-2022-3086 Cradlepoint IBR600 Command Injection

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code...

CVE-2022-3086 Cradlepoint IBR600 Command Injection

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code...

CISA Releases Two Industrial Control Systems Advisories

CISA has released two 2 Industrial Control Systems ICS advisories on November 17, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for...

Cradlepoint IBR600 命令注入漏洞

The Cradlepoint IBR600 is a router from Cradlepoint USA. The Cradlepoint IBR600 suffers from a command injection vulnerability that stems from poor shell escaping. An attacker can exploit this vulnerability to gain unrestricted shell access...

Cradlepoint IBR600

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low attack complexity Vendor: Cradlepoint Equipment: IBR600 Vulnerabilities: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code and native system commands. 3. TECHNICAL DETAILS 3.1...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

Code injection

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471

The CVE-2021-37471 entry concerns Cradlepoint IBR900-600 devices running firmware versions prior to 7.21.10. The vulnerability is caused by a restricted shell escape sequence that can be exploited to concurrently deny availability of the NetCloud Manager console, the local console, and the SSH co...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

Cradlepoint IBR900-600 安全漏洞

The Cradlepoint IBR900-600 is a router from Cradlepoint USA. A security vulnerability exists in the Cradlepoint IBR900-600 that stems from a restricted shell escape sequence that may exist on Cradlepoint IBR900-600 7.2.60 devices. An attacker could exploit the vulnerability to deny the availabili...