CVE-2023-0127

A command injection vulnerability in the firmwareupdate command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root...

PT-2023-16030 · D Link · Dwl-2600Ap Firmware

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A command injection vulnerability in the firmware update command, located in the device's restricted telnet interface, allows an authenticated attacker ...

Control By Web X-400, X-600M

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Control By Web Equipment: X-400, X-600M Vulnerabilities: Cross-Site Scripting, Code Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to inject...

PT-2023-2358 · D Link · D-Link Dir820La1

Name of the Vulnerable Software and Affected Versions: D-Link DIR820LA1 versions prior to FW106B02 Description: The issue is related to a heap overflow vulnerability in the D-Link DIR820LA1 router's firmware. This vulnerability can be exploited by a remote attacker to cause a denial of service. T...

CVE-2022-48311

UNSUPPORTED WHEN ASSIGNED Cross Site Scripting XSS in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B allows authenticated attacker to inject their own script into the page via HTTP configuration page. NOTE: This vulnerability only affects products tha...

SRC-2023-0003 : TP-Link Archer AX20/AX21 minidlnad db_dir Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX20 and AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the misconfiguration of the dbdir...

CVE-2023-23120

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new...

Design/Logic Flaw

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new...

Design/Logic Flaw

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new firmware ima...

TRENDnet TV-IP651WI 安全漏洞

The TRENDnet TV-IP651WI is a wireless network camera from TRENDnet. A security vulnerability exists in TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier, which is caused due to the use of the cyclic redundancy check CRC algorithm for integrity checking during a firmware...

Delta Electronics DVW-W02W2-E2

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Public exploit available/exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: DVW-W02W2-E2 Vulnerabilities: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a threat actor with...

CVE-2023-23120

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new...

Ubiquiti airFiber 安全漏洞

Ubiquiti airFiber is a peer-to-peer wireless platform from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier, which is caused by the use of the cyclic redundancy check CRC algorithm for integrity checking during a firmware update, an...

CVE-2023-23119

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new firmware ima...

Delta Electronics DX-2100-L1-CN

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Public exploits available/exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: DX-2100-L1-CN Vulnerabilities: OS Command Injection, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage NAS devices that could lead to arbitrary code injection. Tracked as CVE-2022-27596, the vulnerability is rated 9.8 out of a maximum of 10 on the CVSS scoring scale. It affects...

PHOENIX CONTACT PLCNext AXC F 2152 Improper Access Control (CVE-2019-10998)

An issue was discovered on Phoenix Contact AXC F 2152 No.2404267 before 2019.0 LTS and AXC F 2152 STARTERKIT No.1046568 before 2019.0 LTS devices. Unlimited physical access to the PLC may lead to a manipulation of SD cards data. SD card manipulation may lead to an authentication bypass opportunit...

PT-2023-15145 · NetGear · Nighthawk R6220 Ac1200 Smart Wi-Fi Router

Name of the Vulnerable Software and Affected Versions: Nighthawk R6220 AC1200 Smart Wi-Fi Router versions V1.1.0.112 1.0.1, V1.1.0.114 1.0.1 Description: The web interface of the router is susceptible to a CRLF Injection attack, which can be used to perform Reflected XSS and HTML Injection. An...

Siemens in SCALANCE Products (CVE-2022-46143)

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

PT-2023-12988 · Western Digital · Western Digital My Cloud

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS versions prior to 5.26.119 Description: A command injection issue in the DDNS service configuration allows an attacker to execute code as the root user. This issue was demonstrated at Pwn2Own, indicating its...