CVE-2017-7917

CVE-2017-7917 describes a Cross-Site Request Forgery in Moxa OnCell devices (G3110-HSPA, G3110-HSDPA, G3150-HSDPA, 5104-HSDPA/HSPA, 5004-HSPA). The issue arises because the application does not sufficiently verify that a request originated from the user they claim, allowing an attacker to modify ...

CVE-2017-7913

CVE-2017-7913 affects Moxa OnCell devices (G3110-HSPA/G3110-HSDPA, G3150-HSDPA, 5104-HSDPA/HSPA, 5004-HSPA). Root cause: the device configuration files store passwords in plaintext, enabling potential credential exposure. Impact stated in sources ranges from partial confidentiality loss to authen...

CVE-2017-7915

CVE-2017-7915 affects multiple Moxa OnCell devices (G3110-HSPA, G3110-HSDPA, G3150-HSDPA, 5104-HSDPA, 5104-HSPA, 5004-HSPA). The issue is an Improper Restriction of Excessive Authentication Attempts, enabling brute-force attempts to determine authentication parameters and bypass authentication. A...

Code injection

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIAIPADDRESS parameter...

CVE-2015-6023

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands...

CVE-2015-6024

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIAIPADDRESS parameter...

CVE-2015-6024

CVE-2015-6024 affects NetCommWireless HSPA 3G10WVE routers (firmware before 3G10WVE-L101-S306ETS-C01_R05). The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter, indicating potential remote command execution with ...

CVE-2015-6023

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands...

CVE-2015-6023

CVE-2015-6023 and CVE-2015-6024 affect NetComm Wireless HSPA 3G10WVE routers. The ping.cgi web interface in firmware older than 3G10WVE-L101-S306ETS-C01_R05 allows: (1) bypassing access controls via a direct request (CVE-2015-6023); and (2) remote command execution by authenticated users through ...

HELP NetCommWireless HSPA 3G10WVE Command Injection Vulnerability

HELP NetCommWireless HSPA 3G10WVE is a wireless router product from HELP UAE. A command injection vulnerability exists in the HELP NetCommWireless HSPA 3G10WVE, which allows remote attackers to submit a special request to inject arbitrary commands and execute them...

NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities

Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2015-6024 Date: ==== 03-05-2016 dd/mm/yyyy Vendor: ====== NetComm Wireless is a leading develop...

NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities

Exploit for cgi platform in category web applications Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2015-6024 Date: ==== 03-05-2016 dd/mm/yyy...

NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities

NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2015-6024 Date: ====...

NetCommWireless HSPA 3G10WVE 命令执行漏洞

Below listed vulnerabilities enable an anonymous unauthorized attacker to gain access of network troubleshooting page ping.cgi on wireless router and inject commands to compromise full system/network. 1 Bypass authentication and gain unauthorized access vulnerability - CVE-2015-6023 2 Command...

NetCommWireless HSPA 3G10WVE Authentication Bypass

No description provided by source...

NetCommWireless HSPA 3G10WVE Authentication Bypass / Code Execution

Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2016-6024 Date: ==== 03-05-2016 dd/mm/yyyy Vendor: ====== NetComm Wireless is a leading develop...

B&B ELECTRONICS UCR11-v2/UCR11 v2 SL 弱口令

参考链接: http://www.induowireless.com/wp-content/uploads/2014/03/ucr11-3g-router-hspa-cdma.pdf...

[security bulletin] HPSBHF03408 rev.2 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04773272 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04773272 Version: 2 HPSBHF03408 rev.2 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G...

CVE-2015-5368

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors...

Code injection

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors...