CVE-2024-6684 Authentication Bypass in GST Electronics' inohom Nova Panel N7

Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2024-6684

The CVE-2024-6684 entry concerns GST Electronics’ inohom Nova Panel N7, affected up to version 1.9.9.6. The vulnerability is an authentication bypass via an alternate path or channel, enabling unauthorized access without user interaction. The CVSS 4.0 metrics indicate network access with low comp...

CVE-2024-7502

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code...

CVE-2024-7502

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code...

CVE-2024-7502

CVE-2024-7502 affects Delta Electronics DIAScreen; a crafted DPA file can trigger a stack-based buffer overflow in DPA parsing, enabling remote code execution. ZDI advisories confirm remote exploitation requiring user interaction (visiting a malicious page or opening a malicious file). No public ...

CVE-2024-7502 Delta Electronics DIAScreen Stack-Based Buffer Overflow

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code...

CVE-2024-7502 Delta Electronics DIAScreen Stack-Based Buffer Overflow

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on August 6, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-219-01 Delta Electronics DIAScreen CISA encourages users and administrators to review the...

Delta Electronics DIAScreen

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : DIAScreen Vulnerability : Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a stack-based buffer...

PT-2024-38392 · Delta Electronics · Delta Electronics Diascreen

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen affected versions not specified Description: A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. Recommendations: At...

PT-2024-9814 · Delta Electronics · Diascreen

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen affected versions not specified Description: The issue is related to a stack-based buffer overflow in the BACnetParameter component. If an attacker tricks a valid user into running Delta Electronics DIAScreen with ...

PT-2024-9813 · Delta Electronics · Diascreen

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen affected versions not specified Description: The issue is related to a stack-based buffer overflow in the CEtherIPTagItem component of Delta Electronics DIAScreen. This can be exploited if an attacker tricks a vali...

TOTOLINK LR1200GB Command Injection Vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's Gion Electronics TOTOLINK. The TOTOLINK LR1200GB version 9.3.1cu.2832 suffers from a command injection vulnerability that originates from the hosttime parameter in the NTPSyncWithHost function on the /cgi-bin/cstecgi.cgi pag...

TOTOLINK CA300-PoE Buffer Overflow Vulnerability

TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. The TOTOLINK CA300-PoE suffers from a buffer overflow vulnerability, which originates from the password parameter in the loginauth function of the /cgi-bin/cstecgi.cgi page that fails to correctly validate the...

TOTOLINK LR350 Command Injection Vulnerability

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK LR350 version 9.3.5u.6369B20220309, which originates from the hostName parameter in the setWanCfg function of the /cgi-bin/cstecgi.cgi page that fails to correctly...

TOTOLINK A7000R setWizardCfg function buffer overflow vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A7000R version 9.1.0u.6268B20220504, which originates from the ssid parameter in the setWizardCfg function of the /cgi-bin/cstecgi.cgi page that fails to correctly...

TOTOLINK A3300R Buffer Overflow Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3300R. The vulnerability stems from the function UploadCustomModule parameter in the file /cgi-bin/cstecgi.cgi that causes a buffer overflow. No details of the...

TOTOLINK A3700R Information Disclosure Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from an information disclosure vulnerability that originates in the /cgi-bin/ExportSettings.sh file of the apmib Configuration Handler component, which is not sufficiently protected agains...

TOTOLINK A3700R Access Control Error Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from an Access Control Error vulnerability that originates from the /wizard.html function of the Password Reset Handler component containing an improper access control issue. An attacker...

TOTOLINK A3100R Buffer Overflow Vulnerability (CNVD-2025-07820)

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R version 4.1.2cu.5050B20200504 suffers from a buffer overflow vulnerability that originates in the getSaveConfig function of /cgi-bin/cstecgi.cgi?action=save&setting where the httphost fails...