4 matches found
CVE-2026-96515
CVE-2026-96515: authenticated root command execution in Netlink HG323RW An authenticated limited web user can upload a shell script through the Netlink HG323RW diagnostic import handler and have the UID-0 BOA process execute it. Authentication and valid verification/CSRF values are required; this...
CVE-2021-44132
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
CVE-2021-44132
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
CVE-2021-44132: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...