CVE-2022-25597 ASUS RT-AC86U - Command Injection

ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service...

CVE-2022-25596

The CVE-2022-25596 entry concerns the ASUS RT-AC56U router. A heap-based buffer overflow arises from insufficient validation of the decryption parameter length, enabling an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations, and disrupt service. The affected devi...

CVE-2022-25596 ASUS RT-AC86U - Heap-based buffer overflow

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...

CVE-2022-25595

The multiple connected records confirm CVE-2022-25595 affects ASUS RT-AC86U. The issue is an input/request handling validation error in the device, allowing an unauthenticated attacker on the same LAN (adjacent network) to trigger a denial of service by sending a particular server-to-client reply...

CVE-2022-23973 ASUS RT-AX56U - Stack overflew

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service...

CVE-2022-23973

CVE-2022-23973 affects the ASUS RT-AX56U router. The vulnerability is a stack-based buffer overflow in the user profile configuration function caused by insufficient validation of parameter length. An unauthenticated attacker on the local network (LAN) can trigger arbitrary code execution or disr...

CVE-2022-23972 ASUS RT-AX56U - SQL Injection

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database...

CVE-2022-23971 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...

CVE-2022-23970

The CVE-2022-23970 entry concerns the ASUS RT-AX56U router. A path traversal flaw exists in the update_json function due to insufficient filtering of special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same filena...

CVE-2022-23970 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

Arista Strata 安全漏洞

Arista Networks Arista Strata is a network switch from Arista Networks. A security vulnerability exists in the Arista Strata that stems from a mismatch in the IP protocol field between a rule in a port's IPv4 access list and a rule on a "vxlan" as a protocol...

CVE-2022-25915

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

Improper access control

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2022-25915

CVE-2022-25915 affects ELECOM LAN routers and is an Improper access control vulnerability that lets a network-adjacent authenticated attacker bypass access restrictions and reach the device management screen via unspecified vectors. Affected devices include WRC-1167GST2, WRC-1167GST2A/H, WRC-2533...

CVE-2022-25915

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

PT-2022-17602 · Elecom · Elecom Lan Routers

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions prior to v1.25 for WRC-1167GST2, WRC-1167GST2A, WRC-1167GST2H, WRC-2533GST2, WRC-2533GST2SP, WRC-2533GST2-G, and EDWRC-2533GST2 ELECOM LAN routers versions prior to v1.52 for WRC-2533GS2-B and WRC-2533GS2-W ELECOM...

CVE-2017-20015

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been...

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. T...

CVE-2017-20015

CVE-2017-20015 affects WEKA INTEREST Security Scanner up to version 1.8, specifically the LAN Viewer component. A denial-of-service can be caused by manipulating an unknown input, with local access required. The vulnerability is exploitable via locally triggered input, and the exploit has been di...

CVE-2017-20015 WEKA INTEREST Security Scanner LAN Viewer denial of service

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been...