109 matches found
CVE-2024-41317
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
CVE-2023-38863
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub410074 function at bin/webmgnt...
CVE-2010-5330
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...
CVE-2024-57234
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...
CVE-2024-57232
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...
CVE-2024-57230
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
CVE-2024-57230
The NETGEAR RAX5 (AX1600 WiFi Router) running version 1.0.2.26 exposes a command injection vulnerability in the apcli_do_enr_pin_wps function, exploitable via the ifname parameter. The affected component is the router’s AP CLI logic related to WPS enrollment; root cause is improper handling of th...
CVE-2024-57230: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
NETGEAR RAX5 安全漏洞
The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apcliwpsgenpincode function to correctly filter constructed command special characters, commands, and so on. An attacker can...
PT-2025-19733 · NetGear · Netgear Rax5
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli wps gen pincode function. This allows for potential exploitation. Recommendations...
CVE-2024-57234
CVE-2024-57234 (NETGEAR RAX5 AX1600 Router) involves a command-injection in the apcli_cancel_wps function triggered by the ifname parameter. The vulnerability affects NETGEAR RAX5 firmware version 1.0.2.26 and can lead to arbitrary command execution with network access, exploitation complexity co...
CVE-2024-57232
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...
CVE-2024-57232: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...
CVE-2024-57231
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
CVE-2024-57231: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
NETGEAR RAX5 安全漏洞
The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apclidoenrpbcwps function to correctly filter constructed command special characters, commands, and so on. An attacker can...
NETGEAR RAX5 安全漏洞
The NETGEAR RAX5 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR RAX50. The vulnerability stems from improper handling of the ifname parameter in the apclidoenrpinwps function, which can be exploited by an attacker to launch an attack and cause the syste...
CVE-2024-57234: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...