Eltex ECCM Monitoring SFTP Authentication Bypass

The vulnerability of the Eltex ECCM monitoring and configuration management system is related to incorrect authentication policies on the SFTP/SCP server. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to temporary configuration files and device software using ...

PT-2026-33875

Уязвимость программного обеспечения системы мониторинга и управления конфигурациями Eltex ECCM связана с некорректной политикой аутентификации на SFTP/SCP-сервере. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к временным файлам...

EUVD-2018-7236

Malware in sbrugna...

EUVD-2018-7235

Malware in sbrugna...

EUVD-2020-29857

Malware in sbrugna...

EUVD-2020-29856

Malware in sbrugna...

EUVD-2018-7237

Malware in sbrugna...

EUVD-2018-7238

Malware in sbrugna...

EUVD-2018-7234

Malware in sbrugna...

CVE-2020-9026

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...

CVE-2020-9027

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...

Eltex NTU-RG-5420G-Wac Router Buffer Overflow DoS

The vulnerability of the Eltex NTU-RG-5420G-Wac router’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the value of the "session" parameter in the cookie header. Exploiting this vulnerability allows a remote attacker to cause...

Eltex SMG-1016M Router Code Execution

The vulnerability of the Eltex SMG-1016M router’s microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

PT-2024-41626

Уязвимость микропрограммного обеспечения маршрутизатора Eltex NTU-RG-5420G-Wac связана с выходом операции за границы буфера в памяти при обработке значения параметра " session" в заголовке Cookie. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в...

Eltex MES5324 Switch Input Validation Reboot

The vulnerability of the web interface for controlling microprogrammed software in the Eltex MES5324 switch lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a restart of the switch by sending specially crafted HTTP...

PT-2024-8126

Name of the Vulnerable Software and Affected Versions: Eltex MES5324 affected versions not specified Description: The issue is related to insufficient input validation in the web interface of the Eltex MES5324 switch's firmware management. An attacker can exploit this by sending specially crafted...

PT-2024-10545 · Eltex · Eltex Smg-1016M

Name of the Vulnerable Software and Affected Versions: Eltex SMG-1016M affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements in the Eltex SMG-1016M trunk gateway's firmware. Exploitation of this issue may allow a remote attacker t...

Etex ESR-200 Information Disclosure

The vulnerability of the NTPD microprogramming-based service router “ESR-20” is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain preliminary information about the device...

Etlte ESR-200 NTP Code Execution

The vulnerability of the NTP synchronization protocol implemented by the Ethernet interface device Eltex “ESR-200” is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to execute malicious code or increase their privileges...

Kaspersky Security System DoS

The vulnerability of the connected module “Kaspersky Security System” of the Ethernet switch software “Eltex ESR-200” is related to the improper creation of connections. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...