CVE-2022-48261

There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to be abnormal...

CVE-2023-25233

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Huawei BiSheng-WNM 命令注入漏洞

Huawei BiSheng-WNM is a Huawei printer from Huawei China. A security vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325. An attacker can exploit the vulnerability to remotely execute code...

Huawei BiSheng-WNM 命令注入漏洞

Huawei BiSheng-WNM is a Huawei printer from Huawei China. A security vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325. An attacker can exploit the vulnerability to elevate privileges...

D-Link DIR-878 <= 1.30B08 Multiple Command Injection Vulnerabilities

D-Link DIR-878 devices are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DAP Device Detection Consolidation

Consolidation of D-Link DAP devices detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

Aztech WMB250AC 命令注入漏洞

The Aztech WMB250AC is a wireless router from Aztech. A security vulnerability exists in the Aztech WMB250AC Mesh Routers Firmware version 016 2020 that stems from incorrectly managing sessions. An attacker could use the vulnerability to bypass authentication and execute arbitrary commands with...

CVE-2023-24184

TOTOLink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability...

Authentication flaw

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

CVE-2022-40021

QVidium Technologies Amino A140 prior to firmware version 1.0.0-283 was discovered to contain a command injection vulnerability...

Design/Logic Flaw

TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0LCD20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0LCD20200513...

Authorization

In WAGO Unmanaged Switch 852-111/000-001 in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters...

CVE-2022-47703

TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0LCD20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0LCD20200513...

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is an electronic system designed for the operation of digital algorithms for applications in industrial environments. A security vulnerability exists in WAGO Unmanaged Switch 852-111/000-001 firmware version 01,...

CVE-2022-47703

TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0LCD20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0LCD20200513...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5176)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is...

D-Link DIR-825 Rev B <= 2.10b02 NULL Pointer Dereference Vulnerability

D-Link DIR-825 Rev. B devices are prone to a NULL pointer dereference vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wago PFC200 iocheckd service 'I/O-Check' cache Command Injection (CVE-2019-5175)

An exploitable command injection vulnerability exists in the iocheckd service I/O-Check' function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...