Lucene search
+L

133 matches found

OSV
OSV
•added 2025/01/10 6:15 p.m.•22 views

CVE-2024-57225

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

9.8CVSS5.8AI score0.01678EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/10 5:15 p.m.•25 views

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

6.3CVSS5.8AI score0.00689EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/10 5:15 p.m.•38 views

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

6.3CVSS0.00689EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/10 12:00 a.m.•22 views

PT-2025-3412 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered, affecting the reset wifi function through the devname parameter. This allows for potential exploitation. No information is provided about the...

6.3CVSS7.6AI score0.00689EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•15 views

Linksys E7350 安全漏洞

The Linksys E7350 is a wireless router device from Leadsys. A security vulnerability exists in the handling of the devname parameter by the Linksys E7350 resetwifi function, which can be exploited by a remote attacker to submit a special request that can be used in the application context to...

9.8CVSS7.2AI score0.01678EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•0 views

CVE-2024-57225: Improper Neutralization of Special Elements used in a Command

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

9.8CVSS5.9AI score0.01678EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•28 views

CVE-2024-57225

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

0.01678EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/10 12:00 a.m.•10 views

CVE-2024-57225

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

8AI score0.01678EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•16 views

TOTOLINK A6000R 安全漏洞

The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. TOTOLINK A6000R suffers from a command injection vulnerability, which originates from the devname parameter of the resetwifi function,...

6.3CVSS7.2AI score0.00689EPSS
SaveExploits1References1
CVE
CVE
•added 2025/01/10 12:00 a.m.•73 views

CVE-2024-57225

The Linksys E7350 wireless router, specifically version 1.1.00.032 , is susceptible to a command injection vulnerability. The flaw exists in the handling of the devname parameter within the reset_wifi function. A remote attacker can exploit this by submitting a specially crafted request to execut...

9.8CVSS8.2AI score0.01678EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•4 views

CVE-2024-57214: Improper Neutralization of Special Elements used in a Command

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

6.3CVSS5.9AI score0.00689EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•24 views

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC6 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the mac and devName parameters. Exploiting this vulnerability could...

9CVSS8.3AI score0.01283EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/21 12:00 a.m.•29 views

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC15 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName in the Tenda AC15 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability could allow a...

9CVSS8.3AI score0.01303EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/09 12:00 a.m.•17 views

The vulnerability of the formWifiBasicSet() function (/goform/SetOnlineDevName) in the Tenda A301 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function /goform/SetOnlineDevName of the Tenda A301 router’s software lies in the fact that the operation may go beyond the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS6.8AI score0.00993EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/06/28 5:15 p.m.•15 views

CVE-2024-6403

A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched...

9.8CVSS6.4AI score0.00993EPSS
SaveExploits1References4
OSV
OSV
•added 2024/06/28 5:15 p.m.•14 views

CVE-2024-6402

A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely...

9.8CVSS6.3AI score0.00993EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/06/28 12:00 a.m.•13 views

Tenda A301 安全漏洞

Tenda A301 is a wireless signal extender from Tenda, China. A buffer overflow vulnerability exists in Tenda A301 version 15.13.08.12, which is caused by the /goform/SetOnlineDevName parameter devName failing to correctly validate the length of the input data, and can be exploited by a remote...

9.8CVSS8.2AI score0.00993EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/06/20 12:00 a.m.•21 views

PT-2024-6685 · Tenda · Tenda A301

Name of the Vulnerable Software and Affected Versions: Tenda A301 version 15.13.08.12 Description: A critical issue has been found in the function formWifiBasicSet of the file /goform/SetOnlineDevName, where the manipulation of the argument devName leads to a stack-based buffer overflow. This can...

10CVSS6.8AI score0.00993EPSS
SaveExploits1References7
OSV
OSV
•added 2024/06/19 3:15 p.m.•19 views

UBUNTU-CVE-2021-47599

In the Linux kernel, the following vulnerability has been resolved: btrfs: use latestdev in btrfsshowdevname The test case btrfs/238 reports the warning below: WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfsshowdevname+0x104/0x1e8 btrfs CPU: 2 PID: 1 Comm: systemd Tainted: G W O...

4.7CVSS6.2AI score0.00147EPSS
SaveExploits0References26
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•11 views

Fedora: Security Advisory for rust-ifcfg-devname (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder