Lucene search
+L

31 matches found

BDU FSTEC
BDU FSTEC
•added 2026/03/04 12:00 a.m.•15 views

The vulnerability of the sub_43F020 (/goform/formPdbUpConfig) function in the UTT HiPER 810 router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub43F020 /goform/formPdbUpConfig function in the UTT HiPER 810 router microprogramming system is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

9CVSS6.1AI score0.04491EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/04 12:00 a.m.•14 views

The vulnerability of the sub_446B18 function in the /goform/formPdbUpConfig file of the UTT 521G router’s microprogramming software, which allows a hacker to execute arbitrary commands.

The vulnerability of the sub446B18 function in the /goform/formPdbUpConfig file of the UTT 521G router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command processing when handling the policyNames parameter...

9CVSS6.1AI score0.06803EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2026/02/20 4:22 p.m.•22 views

CVE-2026-2846

A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection. The attack can be initiated...

8.6CVSS0.07499EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/20 3:32 p.m.•62 views

CVE-2026-2846 UTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection

A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection. The attack can be initiated...

8.6CVSS0.07499EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/20 3:32 p.m.•38 views

CVE-2026-2846

UTT HiPER 520 1.7.7-160105 Web Management Interface contains a vulnerability in the sub_44D264 function of /goform/formPdbUpConfig. By manipulating the policyNames argument, an attacker can trigger os command injection remotely. Affects the Web Management Interface component; CVSS data indicate h...

8.6CVSS5.4AI score0.07499EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•1 views

CVE-2026-2846: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection. The attack can be initiated...

8.6CVSS7AI score0.07499EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/10 1:23 a.m.•13 views

CVE-2026-2188

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been...

8.6CVSS5.4AI score0.06803EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/09 7:14 a.m.•12 views

CVE-2026-2135

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now...

8.8CVSS5.5AI score0.04491EPSS
SaveExploits1References1
CVE
CVE
•added 2026/02/08 9:32 p.m.•49 views

CVE-2026-2188

CVE-2026-2188 affects UTT 进取 521G release 3.1.1-190816. The vulnerable component is the function sub_446B18 in the file /goform/formPdbUpConfig. An input manipulation of the argument policyNames can cause an OS command injection, with remote exploit viability. Public disclosures of the exploit ex...

8.6CVSS7AI score0.06803EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/02/08 9:32 p.m.•33 views

EUVD-2026-5762

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been...

8.6CVSS5.3AI score0.06803EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/08 9:32 p.m.•11 views

CVE-2026-2188 UTT 进取 521G formPdbUpConfig sub_446B18 os command injection

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been...

8.6CVSS5.4AI score0.06803EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/08 9:32 p.m.•17 views

CVE-2026-2188

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been...

8.6CVSS6.9AI score0.06803EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/02/08 9:32 p.m.•56 views

CVE-2026-2188 UTT 进取 521G formPdbUpConfig sub_446B18 os command injection

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been...

8.6CVSS0.06803EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/08 5:16 a.m.•29 views

CVE-2026-2135

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now...

8.8CVSS0.04491EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/08 5:16 a.m.•16 views

CVE-2026-2135

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now...

8.8CVSS5.7AI score0.04491EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/02/08 4:32 a.m.•16 views

EUVD-2026-5813

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now...

8.8CVSS6.4AI score0.04491EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/08 4:32 a.m.•59 views

CVE-2026-2135 UTT HiPER 810 formPdbUpConfig sub_43F020 command injection

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now...

6.5CVSS0.04491EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/08 4:32 a.m.•16 views

CVE-2026-2135

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now...

6.5CVSS6.5AI score0.04491EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/02/08 4:32 a.m.•54 views

CVE-2026-2135

CVE-2026-2135 affects UTT HiPER 810, version 1.7.4-141218. The vulnerability exists in the function sub_43F020 of the file /goform/formPdbUpConfig, where manipulating the argument policyNames enables a remote command injection. Public exploits are available, enabling remote initiation with likely...

8.8CVSS6.5AI score0.04491EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•27 views

PT-2026-6961

Name of the Vulnerable Software and Affected Versions UTT HiPER 810 version 1.7.4-141218 Description A flaw exists in UTT HiPER 810 that allows for remote command injection. The issue is located in the sub 43F020 function within the /goform/formPdbUpConfig file. Manipulation of the policyNames...

8.8CVSS6.9AI score0.04491EPSS
SaveExploits1References8
Rows per page
Query Builder