Lucene search
+L

102 matches found

osv_cve
osv_cve
•added 2026/02/06 7:16 a.m.•25 views

CVE-2026-2000

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

7.2CVSS5.2AI score0.19728EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/06 7:16 a.m.•31 views

CVE-2026-2000

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

7.2CVSS0.19728EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/06 6:32 a.m.•14 views

CVE-2026-2000

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

5.8CVSS5.1AI score0.19728EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/02/06 6:32 a.m.•24 views

EUVD-2026-5693

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

5.8CVSS5.1AI score0.19728EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/06 6:32 a.m.•19 views

CVE-2026-2000 DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

5.8CVSS5.1AI score0.19728EPSS
SaveExploits1References4
Mend
Mend
•added 2026/02/06 6:32 a.m.•7 views

CVE-2026-2000

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

7.2CVSS5.1AI score0.19728EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/06 6:32 a.m.•45 views

CVE-2026-2000

CVE-2026-2000 affects DCN DCME-320 Web Management Backend. The vulnerability is in apply_config() handling of the ip_list argument in /function/system/basic/bridge_cfg.php, where manipulation leads to command injection. It is remotely exploitable and exploits have been published. Public reports (...

7.2CVSS5.1AI score0.19728EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•32 views

PT-2026-6684

Name of the Vulnerable Software and Affected Versions DCN DCME-320 versions up to 20260121 Description A flaw exists in the Web Management Backend component of DCN DCME-320. Specifically, manipulating the ip list argument within the apply config function of the /function/system/basic/bridge cfg.p...

5.8CVSS5.3AI score0.19728EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•26 views

DCN DCME-320: Command Injection Vulnerability

DCN DCME-320 is an Internet exchange gateway router developed by China's DCN Technology Co., Ltd. Versions of DCN DCME-320 prior to 20260121 contained a command injection vulnerability. This vulnerability stemmed from incorrect operations with the parameter iplist in the function applyconfig with...

7.2CVSS5.5AI score0.19728EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/06 12:00 a.m.•9 views

CVE-2026-2000: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

7.2CVSS5.1AI score0.19728EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•37 views

EUVD-2025-25740

Malicious code in bioql PyPI...

9.8CVSS6.7AI score0.07691EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/08/26 12:23 p.m.•20 views

CVE-2025-9387

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

9.8CVSS6.5AI score0.07691EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/08/24 12:15 p.m.•16 views

CVE-2025-9387

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

9.8CVSS6.4AI score0.07691EPSS
SaveExploits1References5
NVD
NVD
•added 2025/08/24 12:15 p.m.•23 views

CVE-2025-9387

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

9.8CVSS0.07691EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/24 12:02 p.m.•14 views

CVE-2025-9387 DCN DCME-720 Web Management Backend ip_block.php os command injection

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

6.5CVSS6.4AI score0.07691EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/24 12:02 p.m.•49 views

CVE-2025-9387 DCN DCME-720 Web Management Backend ip_block.php os command injection

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

6.5CVSS0.07691EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/24 12:00 a.m.•8 views

CVE-2025-9387: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

9.8CVSS6.5AI score0.07691EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/24 12:00 a.m.•30 views

PT-2025-34563

Name of the Vulnerable Software and Affected Versions: DCN DCME-720 version 9.1.5.11 Description: A vulnerability exists in DCN DCME-720 version 9.1.5.11 related to OS command injection. The issue is located in the Web Management Backend component, specifically within the file...

9.8CVSS6.7AI score0.07691EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/08/24 12:00 a.m.•36 views

DCN DCME-720 security vulnerabilities

DCN DCME-720 is a multi-core egress gateway from China Shenzhoukuntai DCN. A security vulnerability exists in DCN DCME-720 version 9.1.5.11, which originates from os command injection and could lead to remote attacks...

9.8CVSS6.7AI score0.07691EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/23 10:36 a.m.•23 views

CVE-2024-52777

DCME-320 =7.4.12.90, DCME-520 =9.25.5.11, DCME-320-L, =9.3.5.26, and DCME-720 =9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/licenseupdate.php...

9.8CVSS5.9AI score0.00752EPSS
SaveExploits0References1
Rows per page
Query Builder