64 matches found
CVE-2020-9026
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9026
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...
Command injection
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...
Command injection
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9026
The CVE-2020-9026 entry concerns ELTEX NTP-RG-1402G devices (1v10, 3.25.3.32) and the NTP-2 device. The issue is an OS command injection vulnerability triggered via the PING field in the resource ping.cmd. Root cause: input handling in command construction allows execution of arbitrary OS command...
CVE-2020-9026
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...
CVE-2020-9027
CVE-2020-9027 affects ELTEX NTP-RG-1402G devices (1v10, 3.25.3.32) and the NTP-2 variant. The vulnerability enables OS command injection through the TRACE field of the resource ping.cmd, caused by insufficient input filtering during OS command construction. Impact is high/critical per NVD CVSS 3....
The vulnerability of Eltex switchboard servers allows a hacker to trigger a service failure.
The vulnerability of Eltex switch web servers exists due to the lack of checks for the length of the parameters “restoreUrl”, “errorCollector”, “userName$query”, and “password$query” in the requests sent during authentication. Exploiting this vulnerability allows a malicious actor to cause a...
Eltex ESP-200 Authentication Bypass Vulnerability
Eltex ESP-200 is a wireless router product. A security vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. A remote attacker can exploit the vulnerability to log in unauthenticated with the help of default credentials...
Eltex ESP-200 Privilege Vulnerability
Eltex ESP-200 is a wireless router product. An elevation of privilege vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to activate an elevated privilege user...
Eltex ESP-200 Information Disclosure Vulnerability
Eltex ESP-200 is a wireless router product. An information disclosure vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to extract password hash information for all users...
Eltex ESP-200 Command Injection Vulnerability
Eltex ESP-200 is a wireless router product. A command injection vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to execute arbitrary code...
Default credentials
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15357
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...