CVE-2024-41315

The TOTOLINK A6000R wireless router (version V1.0.1-B20201211.2000 ) is vulnerable to a command injection vulnerability within the apcli_do_enr_pin_wps function. The root cause is the failure to properly neutralize or filter special characters in the ifname parameter when processing commands. A r...

CVE-2024-41318

The TOTOLINK A6000R router, specifically version V1.0.1-B20201211.2000 , is vulnerable to a command injection flaw. The issue exists within the apcli_wps_gen_pincode function due to the failure to properly neutralize special elements in the ifname parameter. This allows a remote attacker to execu...

PT-2024-7950 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version 1.0.1-B20201211.2000 Description: The issue is related to a command injection vulnerability in the apcli do enr pin wps function, specifically via the ifname parameter. This vulnerability can be exploited by a remote...

PT-2024-8098 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: The issue is related to the apcli wps gen pincode function in the TOTOLINK A6000R router's firmware, which fails to neutralize special elements used in a command when processing the...

CVE-2024-41320

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the getapcliconninfo function...

TOTOLINK A6000R 安全漏洞

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that stems from the ifname parameter in the getapcliconninfo function containing a command injection vulnerability. No details of the vulnerability are...

CVE-2024-41320: Improper Neutralization of Special Elements used in a Command

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the getapcliconninfo function...

CVE-2024-41317: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

PT-2024-8129 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: The issue is related to the apcli cancel wps function in the TOTOLINK A6000R router's firmware, which fails to neutralize special elements used in an operating system command. This ca...

PT-2024-8127 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: The issue is related to the get apcli conn info function in the TOTOLINK A6000R router's firmware, which fails to neutralize special elements used in an OS command. This can be...

CVE-2024-41320

The TOTOLINK A6000R router (version V1.0.1-B20201211.2000 ) is susceptible to a command injection vulnerability within the get_apcli_conn_info function. The root cause is the failure to properly neutralize special elements used in OS commands when processing the ifname parameter. A remote attacke...

Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which...

CVE-2024-4502: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is an unknown function of the file /view/dhcp/dhcpClient/dhcpclientcommit.php. The manipulation of the argument ifName leads to os command injection. It is possible to launch the attack remotely. The...

PT-2024-31373

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability has been found in Ruijie RG-UAC. The issue affects an unknown function of the file /view/dhcp/dhcpClient/dhcp client commit.php. The manipulation of the argument ifName leads to...

The vulnerability of the sub_4CCE4 function in ASUS RT-AX57 Wi-Fi router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the sub4CCE4 function in ASUS’ Wi-Fi router software ASUS RT-AX57 exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using a specially crafted request to the ifname field...

PT-2023-7093 · Asus · Asus Rt-Ax57

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX57 version 3.0.0.4 386 52041 Description: The issue exists due to insufficient input validation in the sub 4CCE4 function of the ASUS RT-AX57 Wi-Fi router's firmware. This allows a remote attacker to execute arbitrary code by sendin...

Design/Logic Flaw

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub410074 function at bin/webmgnt...

COMFAST CF-XR11 命令注入漏洞

The COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version 2.7.2, which can be exploited to execute arbitrary code via the ifname and mac parameters in the sub410074 function of bin/webmgnt...

CVE-2023-38863

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub410074 function at bin/webmgnt...

CVE-2023-38863: Improper Neutralization of Special Elements used in a Command

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub410074 function at bin/webmgnt...