CVE-2023-39445

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

CVE-2023-38576

CVE-2023-38576 relates to a hidden functionality vulnerability in the ELECOM/LOGITEC LAN-WH300N/RE management console. An authenticated user can execute arbitrary OS commands on the device. The incident is described across multiple sources, with the Red Hat entry and PT-Security summary confirmin...

CVE-2023-38132

CVE-2023-38132 concerns the ELECOM LAN-W451NGR family (LOGITEC-related devices) with an improper access control vulnerability that allows an unauthenticated attacker to log in to the telnet service. Affected component: telnet/login mechanism on the device’s management interface. Root cause: failu...

CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service...

CVE-2023-35991

CVE-2023-35991 affects LOGITEC LAN-W300N/DR, LAN-WH300N/DR, LAN-W300N/P, LAN-WH450N/GP, LAN-WH300AN/DGP, LAN-WH300N/DGP, and LAN-WH300ANDGPE. It is a hidden functionality vulnerability allowing an unauthenticated attacker to log in to a management console and execute arbitrary OS commands. The is...

CVE-2023-35991

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

CVE-2023-35991

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

CVE-2023-32626

Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands...

CVE-2023-32626

Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands...

CVE-2023-32626

CVE-2023-32626 affects LAN-W300N/RS and LAN-W300N/PR5 from ELECOM/LOGITEC. A hidden functionality flaw allows an unauthenticated attacker to log in to a management console and execute arbitrary OS commands (remote code execution). Exploitation is network-based and does not require user interactio...

Logitec LAN 安全漏洞

Logitec LAN is a series of routers from Logitec, a Swiss company. A security vulnerability exists in Logitec LAN that stems from the presence of a hidden functionality vulnerability that could allow an unauthenticated attacker to log in to certain management consoles of the product and execute...

PT-2023-26951 · Logitech · Lan-Wh300N/Re

Name of the Vulnerable Software and Affected Versions: LAN-WH300N/RE all versions provided by LOGITEC CORPORATION Description: A hidden functionality vulnerability allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management...

PT-2023-26317 · Unknown · Lan-W451Ngr

Name of the Vulnerable Software and Affected Versions: LAN-W451NGR versions all Description: The issue is related to improper access control, allowing an unauthenticated attacker to log in to the telnet service. Recommendations: For all versions, consider disabling the telnet service until a patc...

Vulnerability fixed in Cisco Unified Communications

Cisco has fixed a vulnerability in Unified Communications Manager CM, Unified CM Session Management Edition SME and Unified Communications Manager IM & Presence Service IM&P. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to...

CVE-2023-28768

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80ABXN.1, XMG1930-30 firmware version V4.80ACAR.1, and XS1930-10 firmware version V4.80ABQE.1 could allow an unauthenticated LAN-based attacker to cause denial-of-service DoS conditions by sending crafted frames to an affected...

CVE-2023-28768

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80ABXN.1, XMG1930-30 firmware version V4.80ACAR.1, and XS1930-10 firmware version V4.80ABQE.1 could allow an unauthenticated LAN-based attacker to cause denial-of-service DoS conditions by sending crafted frames to an affected...

CVE-2023-28768

The CVE-2023-28768 entry concerns Zyxel switches (XGS2220-30, XMG1930-30, XS1930-10) with firmware version 4.80… that mishandles frames, enabling an unauthenticated LAN-based attacker to trigger a denial-of-service by sending crafted frames to the affected switch. Root cause: improper/insufficien...

SUSE CVE-2023-28841

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...