CVE-2023-26802

DCBI-Netlog-LAB v1.0 (DCN) contains a command-injection flaw in /network_config/nsg_masq.cgi that allows unauthenticated attackers to bypass auth and execute arbitrary OS commands via a crafted request. Affected product: DCBI-Netlog-LAB v1.0; impact per sources is high (unathenticated, arbitrary ...

CVE-2021-42324

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

Design/Logic Flaw

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

CVE-2021-42324

The CVE-2021-42324 issue affects DCN S4600-10P-SI switches (pre-R0241.0470). Root cause: improper parameter validation in the console interface. An authenticated, low-privilege attacker can escape the sandbox and execute system commands as root via shell metacharacters in the capture command para...

CVE-2021-42324

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

PT-2022-11588

Name of the Vulnerable Software and Affected Versions DCN S4600-10P-SI devices before R0241.0470 Description An issue was discovered due to improper parameter validation in the console interface, allowing a low-privileged authenticated attacker to escape the sandbox environment and execute system...

CVE-2021-42324: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

CVE-2022-25389

DCN Firewall DCME-520 was discovered to contain an arbitrary file download vulnerability via the path parameter in the file /audit/log/logmanagement.php...

CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25389

DCN Firewall DCME-520 was discovered to contain an arbitrary file download vulnerability via the path parameter in the file /audit/log/logmanagement.php...

Command injection

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25390

CVE-2022-25390 affects DCN Firewall DCME-520. The vulnerability is a remote command execution (RCE) via the host parameter in the file /system/tool/ping.php. The available sources describe the root cause as an RCE path in that script, with high impact on confidentiality, integrity, and availabili...

CVE-2022-25389

CVE-2022-25389 affects the DCN Firewall DCME-520. Multiple connected sources describe an arbitrary file download vulnerability that can be triggered via the path parameter in /audit/log/log_management.php. The issue’s exploitation details are limited to this path parameter; no additional exploit ...

PT-2022-17256

Name of the Vulnerable Software and Affected Versions DCN Firewall DCME-520 version not specified Description A remote command execution issue was discovered, allowing attackers to execute commands via the host parameter in the /system/tool/ping.php file. Recommendations At the moment, there is n...

PT-2022-17254

Name of the Vulnerable Software and Affected Versions DCN Firewall DCME-520 Description The issue is related to an arbitrary file download vulnerability. This vulnerability can be exploited via the path parameter in the file /audit/log/log management.php. Recommendations For DCN Firewall DCME-520...

CVE-2022-25390: Undefined Security Weakness

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25389: Undefined Security Weakness

DCN Firewall DCME-520 was discovered to contain an arbitrary file download vulnerability via the path parameter in the file /audit/log/logmanagement.php...

DCN Firewall DCME-520 安全漏洞

DCN Firewall DCME-520 is a new generation of high-performance security gateway with multi-core high performance from China Cloud Technology DCN. It has excellent performance and powerful data processing capabilities. A security vulnerability exists in the DCN Firewall DCME-520, which originates...

Design/Logic Flaw

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network DCN routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A...