EUVD-2025-28817

Malicious code in bioql PyPI...

The vulnerability of the verify_gemtek_header() function in Linksys E5600 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the verifygemtekheader function in Linksys E5600 router microprogramming software is related to the use of a unstable cryptographic algorithm. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code or cause service failures...

CVE-2025-9146

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verifygemtekheader of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high leve...

CVE-2025-9146

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verifygemtekheader of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high leve...

CVE-2025-9146 Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verifygemtekheader of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high leve...

CVE-2025-9146 Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verifygemtekheader of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high leve...

PT-2025-33749

Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A flaw exists in the Linksys E5600 due to a risky cryptographic algorithm within the verify gemtek header function of the checkFw.sh file in the Firmware Handler component. The attack can be launche...

Gemtek WRTM-127ACN Command Injection (CVE-2020-24365)

A command injection vulnerability exists in Gemtek WRTM-127ACN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Gemtek WVRTM-127ACN 01.01.02.141 Command Injection

Exploit Title: Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection Date: 13/09/2020 Exploit Author: Gabriele Zuddas Version: 01.01.02.127, 01.01.02.141 CVE : CVE-2020-24365 Service Provider : Linkem Product Name : LTE CPE Model ID : WVRTM-127ACN Serial ID : GMK17041801108...

Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection

Exploit Title: Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection Date: 13/09/2020 Exploit Author: Gabriele Zuddas Version: 01.01.02.127, 01.01.02.141 CVE : CVE-2020-24365 Service Provider : Linkem Product Name : LTE CPE Model ID : WVRTM-127ACN Serial ID : GMK17041801108...

CVE-2020-24365

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

CVE-2020-24365

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

Default credentials

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

CVE-2020-24365

CVE-2020-24365 affects Gemtek WRTM-127ACN (01.01.02.141) and WRTM-127x9 (01.01.02.127). The issue, described across NVD and vendor-containing advisories, is a command-injection vulnerability on the Monitor Diagnostic page. An authenticated attacker can execute arbitrary commands on the target dev...

CVE-2020-24365

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

PT-2020-15709

Name of the Vulnerable Software and Affected Versions Gemtek WRTM-127ACN version 01.01.02.141 Gemtek WRTM-127x9 version 01.01.02.127 Description An issue allows an authenticated attacker to execute a command directly on the target machine via the Monitor Diagnostic network page. Commands are...

CVE-2020-24365: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on the target machine. Commands are executed as the root user uid 0. Even if a login is required, most...

Multiple Vulnerabilities in Gemtek CPE7000/WLTCS-106

The Gemtek CPE7000/WLTCS-106 suffers from a SID leak, an authentication bypass vulnerability, an arbitrary file download vulnerability, and a remote root command execution vulnerability. Allows an attacker to exploit the vulnerabilities to download arbitrary files and execute root privileges...

Gemtek CPE7000 WLTCS-106 Administrator SID Retriever

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever', 'Description' = %q A vulnerability exists for Gemtek CPE7000 model ID...

Gemtek CPE7000 WLTCS-106 sysconf.cgi Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution', 'Description' = %q A vulnerability exists for Gemt...