Command injection

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...

CVE-2023-24135

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...

PT-2024-12024

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia Eagle 1200AC version V15.03.06.33 en Description A command injection issue was discovered in the function formWriteFacMac, allowing attackers to execute arbitrary commands by manipulating the mac parameter. This enables...

CVE-2023-24135

CVE-2023-24135 affects Jensen of Scandinavia Eagle 1200AC (V15.03.06.33_en). The vulnerability lies in the function formWriteFacMac, where an attacker can inject commands by manipulating the mac parameter, enabling arbitrary command execution with local access (CVSSv3.1 base 7.8, HIGH; LOw privil...

Jensen of Scandinavia Eagle 1200AC Security Vulnerability

Jensen of Scandinavia Eagle 1200AC is a router from Jensen. A security vulnerability exists in the Jensen Eagle 1200AC version V15.03.06.33en. An attacker can exploit this vulnerability to execute arbitrary commands by manipulating mac parameters...

eagle-sky.net Cross Site Scripting vulnerability OBB-3813171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eagle-regpot.eu Cross Site Scripting vulnerability OBB-3768961

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eagle-project.be Cross Site Scripting vulnerability OBB-3705039

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the uClibC and uClibC-ng libraries used by Hirschmann EAGLE industrial network interfaces allows attackers to execute arbitrary code.

The vulnerability of the uClibC and uClibC-ng libraries used by Hirschmann EAGLE industrial network switches is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

eagle-sky.net Cross Site Scripting vulnerability OBB-3554889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered

The cyber espionage actor tracked as Blind Eagle has been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan on compromised systems. "The group is known for using a variety of sophisticated attack techniques, including custom malware, social...

Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered

The cyber espionage actor tracked as Blind Eagle has been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan on compromised systems. "The group is known for using a variety of sophisticated attack techniques, including custom malware, social...

CVE-2023-24122

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the ssid5g parameter at /goform/WifiBasicSet...

CVE-2023-24123

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet...

CVE-2023-24124

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet...

CVE-2023-24127

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet...

CVE-2023-24125

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepkey25g parameter at /goform/WifiBasicSet...

CVE-2023-24124

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet...

CVE-2023-24127

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet...

CVE-2023-24123

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet...