4396 matches found
PT-2023-8233 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: The issue is related to a stack overflow via the formDelWlRfPolicy function, which can allow a remote attacker to execute arbitrary commands. This is due to a buffer overflow in the formDelWlRfPolicy...
CVE-2023-51034
TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface...
CVE-2023-50147
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822B20200513...
PT-2023-31745 · Totolink · Totolink Ex1200T
Name of the Vulnerable Software and Affected Versions: TOTOlink EX1200L version 9.3.5u.6146 B20201023 Description: The issue allows for arbitrary command execution via the "cstecgi.cgi" interface, specifically through the setOpModeCfg function. This could potentially be exploited through the...
CVE-2023-50147
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822B20200513...
CVE-2023-50989
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function...
D-Link DIR-850 Security Vulnerability
The D-Link DIR-850 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-850L v.B1FW223WWb01. A remote attacker can exploit this vulnerability to execute arbitrary code via specially crafted scripts on the en parameter...
Design/Logic Flaw
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b distributed in 9.00.1507 MR1, 8.90 prior to vCR8.90.231204a distributed in...
CVE-2023-50469
Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at /apply.cgi...
CVE-2023-0248 Kantech Gen1 ioSmart card reader
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader...
CVE-2023-0248 Kantech Gen1 ioSmart card reader
An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances can recover the reader's communication memory between the card and reader...
CVE-2023-49418
TOTOLink A7000R V9.1.0u.6115B20201022has a stack overflow vulnerability via setIpPortFilterRules...
CVE-2023-49007
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...
CVE-2023-49405
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...
CVE-2023-49402
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...
CVE-2023-49402
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...
CVE-2023-49403
Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setFixTools...
CVE-2023-49428
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...
PT-2023-29196 · Dell +1 · Dell Poweredge +2
Name of the Vulnerable Software and Affected Versions: Dell PowerEdge platforms 16G Intel E5 BIOS version 1.4.4 Dell Precision BIOS version 1.4.4 Description: The issue concerns active debug code security vulnerability in the BIOS. An unauthenticated physical attacker could potentially exploit...