VulnCheck KEV: CVE-2023-51833

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

VulnCheck KEV: CVE-2010-2506

Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...

CVE-2023-51833

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

CVE-2023-51833

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

Command injection

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

TRENDnet TEW-411BRPplus Command Injection Vulnerability

The TRENDnet TEW-411BRPplus is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-411BRPplus version v.2.07eu, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

CVE-2023-51833

Affected product: TRENDnet TEW-411BRPplus router, firmware v2.07_eu. Vulnerability: command injection via the data1 parameter in the debug.cgi page, allowing a local attacker to execute arbitrary code. Root cause: improper handling of user-controlled input in the debug.cgi endpoint. Impact (per s...

CVE-2023-51833

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

PT-2024-14307

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-411BRPplus version 2.07 eu Description A command injection issue exists in TRENDnet TEW-411BRPplus version 2.07 eu that allows a local attacker to execute arbitrary code. This is achieved by manipulating the data1 parameter within...

CVE-2023-51833: Improper Neutralization of Special Elements used in a Command

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

PT-2015-7051

Name of the Vulnerable Software and Affected Versions Websense Content Gateway versions prior to 8.0.0 HF02 Description A stack-based buffer overflow issue exists in the handle debug network function, allowing remote administrators to cause a denial of service by submitting a crafted diagnostic...

PT-2014-4991

Name of the Vulnerable Software and Affected Versions NETGEAR GS108PE Prosafe Plus switches version 1.2.0.5 Description The issue allows remote attackers to execute arbitrary code by exploiting a hardcoded password for the ntgruser account. This can be achieved via requests to specific API...

Cross site scripting

Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...

CVE-2010-2506: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...

Code injection

Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 data2 and 2 data3 parameters to a Debugcommandpage.asp and b debug.cgi...

PT-2010-3244 · Linksys · Linksys Wap54Gv3

Name of the Vulnerable Software and Affected Versions: Linksys WAP54Gv3 firmware versions 3.04.03 and earlier Description: The issue allows remote attackers to execute arbitrary commands due to the use of hard-coded credentials for a debug interface on certain web pages. Specifically, the...

CVE-2010-1573: Use of Hard-coded Credentials

Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username Gemtek and password gemtekswd for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the 1 data1, 2 data2, or 3 data3 parameters to a Debugcommandpage.asp and b debug.cgi...

CVE-2010-2261: Improper Control of Generation of Code

Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 data2 and 2 data3 parameters to a Debugcommandpage.asp and b debug.cgi...