Lucene search
+L

69 matches found

CNNVD
CNNVD
added 2023/05/11 12:00 a.m.8 views

GL.iNet devices 安全漏洞

GL.iNet devices are a series of hardware devices from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet devices prior to version 3.216 that stems from a buffer overflow issue...

9.8CVSS8.7AI score0.13743EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.8 views

GL.iNet devices 路径遍历漏洞

GL.iNet devices are a series of hardware devices from China's Guanglian Zhitong GL.iNet company. A path traversal vulnerability exists in GL.iNet devices prior to version 3.216, which can be exploited to allow arbitrary files to be shared in arbitrary folders...

7.5CVSS7.5AI score0.0094EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.9 views

GL.iNet devices 命令注入漏洞

GL.iNet devices are a series of hardware devices from China's Guanglian Zhitong GL.iNet company. A command injection vulnerability exists in GL.iNet devices prior to version 3.216, which originates from allowing an empty file to be created anywhere on the file system. An attacker could use this...

4.9CVSS5.6AI score0.03869EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/05/10 12:00 a.m.13 views

PT-2023-23350 · Gl.Inet · Gl.Inet

Name of the Vulnerable Software and Affected Versions: GL.iNet devices versions prior to 3.216 Description: An issue was discovered that allows the installation of arbitrary software, such as a reverse shell, through the software installation feature. This is possible because the restrictions on...

9.8CVSS7.3AI score0.01053EPSS
SaveExploits1References5
OSV
OSV
added 2023/05/09 6:15 p.m.10 views

CVE-2023-31472

An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied...

7.5CVSS7.2AI score0.19884EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/09 4:15 p.m.9 views

CVE-2023-31476

An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters the working directory is /www...

7.5CVSS5.9AI score0.00804EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/05/09 12:00 a.m.9 views

GL.iNet devices 安全漏洞

GL.iNet devices are a series of hardware devices from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet devices prior to version 3.216, which stems from an API endpoint displaying information about the Wi-Fi configuration, including the SSID and key...

7.5CVSS7.8AI score0.29699EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/09 12:00 a.m.10 views

GL.iNet devices 安全漏洞

GL.iNet devices are a series of hardware devices from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet devices prior to version 3.216, which stems from an arbitrary file write vulnerability that can create an empty file anywhere on the file system...

7.5CVSS7.5AI score0.19884EPSS
SaveExploits1References4
OSV
OSV
added 2022/12/26 5:15 a.m.10 views

CVE-2022-24119

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits0References1
Rows per page
Query Builder