IP-COM M50 操作系统命令注入漏洞

The IP-COM M50 is a wireless router from IP-COM USA. An operating system command injection vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount...

CVE-2022-45717: Improper Neutralization of Special Elements used in an OS Command

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request...

PT-2022-27630 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: The issue is related to a command injection vulnerability. It can be exploited via a crafted GET request to the formSetUSBPartitionUmount function, specifically through the usbPartitionName...

CVE-2022-45717

CVE-2022-45717 affects IP-COM M50 firmware (V15.11.0.33(10768)). The issue is a command injection in the USB partition handling via the usbPartitionName parameter in the formSetUSBPartitionUmount function, exploitable by a crafted GET request. Public documents indicate high-severity impact (CVE w...

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...

CVE-2021-27692: Improper Neutralization of Special Elements used in an OS Command

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...