PT-2025-18245 · Delta Electronics · Ispsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics ISPSoft version 3.20 Description: The issue is related to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing an ISP file. This vulnerability is considered HIGH severity...

TOTOLINK N150RT /boafrm/formStaticDHCP File Buffer Overflow Vulnerability

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that originates from the parameter Hostname in the file /boafrm/formStaticDHCP that fails to correctly validate the length and size of the input data,...

TOTOLINK N150RT Command Injection Vulnerability (CNVD-2025-09944)

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a command injection vulnerability that stems from the parameter localPin in the file /boafrm/formWsc failing to correctly filter constructed command special characters, commands, and ...

CVE-2025-22882: Out-of-bounds Write

Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file...

Delta Electronics ISPSoft 缓冲区错误漏洞

Delta Electronics ISPSoft is a programmable logic controller PLC programming software from Delta Electronics. A stack buffer overflow vulnerability exists in Delta Electronics ISPSoft, which can be exploited by an attacker to execute arbitrary code while parsing a DVP file...

PT-2025-18244 · Delta Electronics · Ispsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics ISPSoft version 3.20 Description: The issue is related to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing an ISP file. This vulnerability is considered HIGH severity...

Delta Electronics ISPSoft 缓冲区错误漏洞

Delta Electronics ISPSoft is a programmable logic controller PLC programming software from Delta Electronics. A stack buffer overflow vulnerability exists in Delta Electronics ISPSoft, which can be exploited by an attacker to execute arbitrary code using debugging logic when parsing CBDGL files...

Delta Electronics ISPSoft

RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

TOTOLINK N600R setWiFiWpsConfig function buffer overflow vulnerability

The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that stems from the pin parameter in the setWiFiWpsConfig function failing to properly validate the length size of the input data, which can be exploited...

Delta Electronics COMMGR Code Execution Vulnerability

Delta Electronics COMMGR is a communication management software from Delta Electronics China. A code execution vulnerability exists in Delta Electronics COMMGR that stems from insufficient randomness in session ID generation, which can be exploited by an attacker to brute-force break the session ...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2025-3495

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...

PT-2025-17322 · Itel Electronics · Itel Electronics Ip Stream

Name of the Vulnerable Software and Affected Versions: Itel Electronics IP Stream version 1.7.0.6 Description: The issue is related to incorrect access control, allowing unauthorized attackers to execute arbitrary commands with Administrator privileges. Recommendations: For Itel Electronics IP...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

Itel Electronics IP Stream 安全漏洞

Itel Electronics IP Stream is an IP streaming application from Itel Electronics. A security vulnerability exists in Itel Electronics IP Stream version v1.7.0.6, which stems from improper access control and could lead to the execution of arbitrary commands with administrator privileges...

CVE-2025-28231

The Itel Electronics IP Stream version v1.7.0.6 is vulnerable to incorrect access control , which allows unauthorized attackers to execute arbitrary commands with Administrator privileges . Evidence of exploitation is available via a published proof-of-concept at https://t.me/DarkWebInformer_CVEA...

CVE-2025-28231: Improper Access Control

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2025-3495

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs CWE-338. An attacker could easily brute force a session ID and load and execute arbitrary code...