PT-2023-24863 · Helmholz +1 · Rex 250 +2

Name of the Vulnerable Software and Affected Versions: Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower than 7.3.2 Description: A vulnerability in the affected devices allows an authenticated remote attacker to inject malicious HTML or JavaScript code...

CVE-2022-4616

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions...

CVE-2022-4616

Delta DX-3021 webserver (versions before 1.24) is affected by CVE-2022-4616: command injection via the network diagnosis page due to insufficient input validation. Remote unauthenticated users can add/delete files and change permissions. Impact is high (I/H, A/H) with CVSSv3 scores: 9.1 (NVD) and...

PT-2023-6856 · Delta · Delta Dx-3021

Name of the Vulnerable Software and Affected Versions: Delta DX-3021 versions prior to 1.24 Description: The webserver in Delta DX-3021 is vulnerable to command injection through the network diagnosis page. This issue could allow a remote unauthenticated user to add files, delete files, and chang...

CVE-2016-4966

The diagnosiscontrol.php page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter...