67 matches found
CVE-2024-57231
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
CVE-2024-57223
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...
CVE-2024-57223
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...
CVE-2024-57227
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
CVE-2024-57224
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
CVE-2024-57222
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...
PT-2025-3414 · Linksys · Linksys E7350
Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the ifname parameter in the apcli wps gen pincode function. This allows for potential exploitation. Recommendations: For Linksys E7350 version...
CVE-2024-57223
CVE-2024-57223 affects Linksys E7350 firmware 1.1.00.032 and earlier in the apcli_wps_gen_pincode function, where the ifname parameter enables a command injection vulnerability. The CVSS v3.1 metrics indicate high impact (C/I/A = High) with network attack vector and no user interaction. Public re...
CVE-2024-57222
The CVE-2024-57222 entry affects Linksys E7350 router firmware 1.1.00.032, where a command-injection vulnerability exists in the apcli_cancel_wps function reachable via the ifname parameter. This allows remote command execution on the device via crafted requests over the network. Multiple connect...
PT-2025-3413 · Linksys · Linksys E7350
Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the ifname parameter in the apcli cancel wps function. This allows for potential exploitation. Recommendations: For Linksys E7350 version 1.1.00.032,...
Linksys E7350 安全漏洞
The Linksys E7350 is a wireless router device from Leadsys. A security vulnerability exists in the handling of the ifname parameter in the Linksys E7350 apclidoenrpinwps function, which can be exploited by a remote attacker to submit a special request that can be used in the application context t...
PT-2025-3415 · Linksys · Linksys E7350
Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the ifname parameter in the apcli do enr pin wps function. This allows for potential exploitation. Recommendations: For Linksys E7350 version 1.1.00.03...
Linksys E7350 安全漏洞
The Linksys E7350 is a wireless router device from Leadsys. A security vulnerability exists in the handling of the ifname parameter in the Linksys E7350 apclicancelwps function, which can be exploited by a remote attacker to submit a special request that can be used in the application context to...
CVE-2024-57227
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
Linksys E7350 安全漏洞
The Linksys E7350 is a wireless router device from Leadsys. A security vulnerability exists in the handling of the ifname parameter by the Linksys E7350 apcliwpsgenpincode function, which can be exploited by a remote attacker to submit a special request that can be used in the application context...
Linksys E7350 安全漏洞
The Linksys E7350 is a dual-band WiFi 6 router with AX1800 speeds from Linksys USA. A security vulnerability exists in Linksys E7350 version 1.1.00.032, which stems from a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
CVE-2024-57224
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
CVE-2024-57227
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
The vulnerability of the apcli_do_enr_pin_wps function in the microprogramming software of the TOTOLINK A6000R router allows a hacker to execute arbitrary commands.
The vulnerability of the apclidoenrpinwps function in the TOTOLINK A6000R router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the command when processing the ifname parameter. Exploiting this vulnerability can allow a remote attacke...