CVE-2022-36554

CVE-2022-36554 describes a command-injection vulnerability in the CLI of Hytec Inter HWL-2511-SS, affecting versions 1.05 and below. The issue allows attackers to run arbitrary commands with root privileges via the affected CLI. Public documents in the connected set confirm the vulnerability and ...

CVE-2022-36555

CVE-2022-36555 affects Hytec Inter HWL-2511-SS, versions 1.05 and below. The root cause is a SHA512crypt implementation for the root account that can be cracked via brute-force, allowing unauthorized root access. Public sources confirm the vulnerability in the device firmware and describe the imp...

CVE-2022-36553

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...

CVE-2022-36553

Hytec Inter HWL-2511-SS (v1.05 and earlier) is affected by an unauthenticated remote command-injection vulnerability in /www/cgi-bin/popen.cgi. Exploitation could allow arbitrary command execution with high impact on confidentiality, integrity, and availability. Public references (NVD/NIST) docum...

PT-2022-23463 · Hytec Inter · Hytec Inter Hwl-2511-Ss

Name of the Vulnerable Software and Affected Versions: Hytec Inter HWL-2511-SS versions 1.05 and below Description: A command injection vulnerability in the CLI implementation allows attackers to execute arbitrary commands with root privileges. Recommendations: For Hytec Inter HWL-2511-SS version...

PT-2022-23464 · Hytec Inter · Hytec Inter Hwl-2511-Ss

Name of the Vulnerable Software and Affected Versions: Hytec Inter HWL-2511-SS versions 1.05 and below Description: The issue concerns the implementation of a SHA512crypt hash for the root account in the affected software, which can be easily cracked via a brute-force attack. Recommendations: For...

CVE-2022-36554: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

Hytec Inter HWL-2511-SS 命令注入漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in Hytec Inter HWL-2511-SS v1.05 and earlier, which stems from a CLI that allows attackers to execute arbitrary commands with root privileges...

CVE-2022-36555: Inadequate Encryption Strength

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...

CVE-2022-36553: Improper Neutralization of Special Elements used in a Command

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...

Hytec Inter HWL-2511-SS 加密问题漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in the Hytec Inter HWL-2511-SS v1.05 and earlier, which originates from a root account that can be easily cracked via brute force attack...

PT-2022-7228

Name of the Vulnerable Software and Affected Versions Hytec Inter HWL-2511-SS version 1.05 and below Description The issue is related to a command injection vulnerability via the component /www/cgi-bin/popen.cgi. This vulnerability is associated with the lack of data sanitization at the managemen...