4487 matches found
CVE-2024-30939
An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...
HPESBST04635 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Multiple Remote and Local Vulnerabilities
Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN2600B SAN Extension Switch - Prior to v9.2.1, v9.2.0b and v9.1.1d HPE B-series SN3600B Fibre Channel Switch - Prior to v9.2.1...
CVE-2024-31616
The Ruijie Networks RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers are vulnerable to arbitrary code execution. This issue exists in firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(07150910) due to a flaw in the common_quick_config.lua file. The impact allows an attacker to execute ar...
Tenda AC8 security vulnerabilities
The Tenda AC8 is a router product that is primarily used for network connectivity in homes and small offices. Tenda AC8 has a stack buffer overflow vulnerability in the formSetRebootTimer function of the /goform/SetRebootTimer file in version 16.03.34.09. An attacker can use this vulnerability to...
CVE-2024-31616
An issue discovered in RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers with firmware version RSR10-01G-T-SRSR3.01B9P2, Release07150910 allows attackers to execute arbitrary code via the commonquickconfig.lua file...
Elber Wayber Analog/Digital Audio STL 4.00 Insecure Direct Object Reference Vulnerability
Elber Wayber Analog/Digital Audio STL version 4.00 suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected...
CVE-2024-32325
TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the ssid parameter in the setWiFiExtenderConfig function...
Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass
Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver...
CVE-2024-32318
Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function...
CVE-2024-32315
Tenda FH1202 v1.2.0.14408 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function...
CVE-2024-32306
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function...
CVE-2024-32288
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function...
CVE-2024-32281
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
CVE-2024-32310
Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function...
PT-2024-2970 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 firmware v1.0.1.25633 Description: The issue is related to a stack overflow vulnerability in the fromNatlimit function, which can be exploited via the page parameter. This vulnerability may allow a remote attacker to...
Tenda AC500 security vulnerabilities
The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow issue in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file. No details of the...
Peplink Smart Reader web interface /cgi-bin/debug_dump.cgi information disclosure vulnerability
Talos Vulnerability Report TALOS-2023-1863 Peplink Smart Reader web interface /cgi-bin/debugdump.cgi information disclosure vulnerability April 17, 2024 CVE Number CVE-2023-43491 SUMMARY An information disclosure vulnerability exists in the web interface /cgi-bin/debugdump.cgi functionality of...
PT-2024-3228 · Tenda · Tenda Tx9
Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical vulnerability was found in the Tenda TX9, affecting the function sub 42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to a stack-based buffer overflow...
PT-2024-5056 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A critical issue was found in the function formSetCfm of the file "/goform/setcfm". The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. It is possible to initiate the...