371 matches found
Tenda G103 Command Injection Vulnerability (CNVD-2023-52857)
Tenda G103 is a GPON fiber optic access device designed for home and SOHO users from Tenda, China. The Tenda G103 version 1.0.0.5 suffers from a command injection vulnerability that stems from the application's failure to properly filter constructed command special characters, commands, etc. An...
The vulnerability of Tenda G103 GPON-terminals’ microprogramming software lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands and compromise the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the GPON-terminal software of Tenda G103 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and affect the integrity, availability,...
CVE-2023-33530
There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...
CVE-2023-33530
There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...
Command injection
There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...
CVE-2023-33530
CVE-2023-33530 : Tenda G103 Gigabit GPON Terminal, firmware version V1.0.0.5, contains a command injection flaw due to insufficient input sanitization. If an attacker gains web management privileges, they can inject commands and escalate to shell privileges. Public documents provided do not inclu...
CVE-2023-33530
There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...
CVE-2022-40740
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
CVE-2022-40740
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
Command injection
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
Realtek GPON router 安全漏洞
The Realtek GPON router is a series of routers from China-based Realtek Semiconductor Realtek. A security vulnerability exists in the Realtek GPON router, which stems from an insufficient filtering of special characters that could allow a remote attacker with administrator privileges to perform a...
CVE-2022-40740 Realtek GPON router - Command Injection
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
CVE-2022-40740 Realtek GPON router - Command Injection
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
CVE-2022-40740
CVE-2022-40740 involves Realtek GPON routers with insufficient filtering for special characters, enabling a remote attacker who is already authenticated as an administrator to perform command injection, execute arbitrary system commands, and disrupt services. The CVSS vector indicates NETWORK att...
ZTE ZXA10 C3XX Access Control Error Vulnerability
ZTE ZXA10 C3XX is a series of optical access aggregation equipment with EPON/GPON function from China ZTE Corporation ZTE. An access control error vulnerability exists in the ZTE ZXA10 C3XX version 2.1.0 and later, before 2.1.0xgp002.4. The vulnerability stems from improper access control setting...
CVE-2022-40055
An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page...
CVE-2022-40055
An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page...
Design/Logic Flaw
An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page...