CVE-2024-8693

A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input alert'XSS' leads to cross site scripting. The attack may be...

CVE-2024-8693 Kaon CG3000 dhcpcd Command cross site scripting

A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input alert'XSS' leads to cross site scripting. The attack may be...

CVE-2024-8693

CVE-2024-8693 affects Kaon CG3000 1.01.43: the dhcpcd Command Handler’s -h argument can be manipulated to trigger cross-site scripting. The vulnerability enables remote exploitation and the public disclosure of the exploit is noted. Multiple sources (NVD/Red Hat listing, PT Security, CN) confirm ...

CVE-2024-8693 Kaon CG3000 dhcpcd Command cross site scripting

A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input alert'XSS' leads to cross site scripting. The attack may be...

CLARO KAON CG3000 跨站脚本漏洞

CLARO KAON CG3000 is a router from the Brazilian company CLARO. A cross-site scripting vulnerability exists in CLARO KAON CG3000 version 1.01.43, which stems from the parameter -h of the component dhcpcd Command Handler can lead to cross-site scripting attacks...

PT-2024-39180 · Kaon · Kaon Cg3000

Name of the Vulnerable Software and Affected Versions: Kaon CG3000 version 1.01.43 Description: A problematic issue has been found in the dhcpcd Command Handler component, allowing for cross-site scripting through the manipulation of the argument -h with malicious input, such as alert'XSS'. This...

CVE-2024-8693: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input leads to cross site scripting. The attack may be launched...

CVE-2024-3659

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...

CVE-2024-3659

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...

CVE-2024-3659 Command injection in KAON AR2140 routers

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...

CVE-2024-3659

CVE-2024-3659 affects KAON AR2140 routers. Firmware versions prior to 3.2.50 and 4.2.16 are vulnerable to a shell command injection via a crafted request to specific endpoints. Exploitation requires access to the device’s administrative portal. Remediation: upgrade to 3.2.50+ or 4.2.16+ (per vend...

CVE-2024-3659 Command injection in KAON AR2140 routers

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...

PT-2024-27087

Name of the Vulnerable Software and Affected Versions KAON AR2140 routers versions prior to 4.2.16 Description The issue is related to a shell command injection vulnerability. It can be exploited by sending a crafted request to one of the endpoints, but access to the administrative portal of the...

KAON AR2140 安全漏洞

The KAON AR2140 is a wireless router from KAON. A security vulnerability exists in the KAON AR2140 version 4.2.16 and prior versions, which stems from the router firmware being susceptible to shell command injection attacks...

CVE-2024-3659: Improper Neutralization of Special Elements used in an OS Command

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...

CVE-2021-43483

An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...

CVE-2021-43483

An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...

CVE-2021-43483

An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...

Authentication flaw

An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...

CVE-2021-43483

An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...