Lucene search
+L

106 matches found

attackerkb
attackerkb
•added 2023/12/22 7:15 p.m.•9 views

CVE-2023-51017

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi...

9.8CVSS6.1AI score0.0097EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/22 12:00 a.m.•21 views

PT-2023-31732 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue allows for unauthorized arbitrary command execution. This is possible through the lanIp parameter of the setLanConfig interface in the cstecgi.cgi endpoint. Recommendation...

9.8CVSS9.5AI score0.0097EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/22 12:00 a.m.•3 views

CVE-2023-51017: Undefined Security Weakness

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi...

9.8CVSS8.4AI score0.0097EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/12/22 12:00 a.m.•14 views

TOTOLINK EX1800T 安全漏洞

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T lanIp parameter. The vulnerability stems from the failure of the lanIp parameter of the setLanConfig interface of cstecgi .cgi to properly filter...

9.8CVSS7.8AI score0.0097EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/22 12:00 a.m.•42 views

CVE-2023-51017

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi...

9.7AI score0.0097EPSS
SaveExploits1References1
OSV
OSV
•added 2023/05/31 9:15 p.m.•15 views

CVE-2023-33636

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

7.2CVSS5.8AI score0.00933EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/05/31 9:15 p.m.•13 views

CVE-2023-33632

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm...

7.2CVSS7.1AI score0.00933EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/05/31 9:15 p.m.•10 views

CVE-2023-33636

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

7.2CVSS7.1AI score0.00933EPSS
SaveExploits0References3
OSV
OSV
•added 2023/05/31 9:15 p.m.•14 views

CVE-2023-33632

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm...

7.2CVSS5.8AI score0.00933EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/31 12:00 a.m.•16 views

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version, which originates from the ipqoslanipdellist interface of /goform/aspForm contains a stack overflow...

7.2CVSS7.2AI score0.00933EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/31 12:00 a.m.•11 views

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version that originates from the ipqoslanipeditlist interface of /goform/aspForm contains a stack overflow...

7.2CVSS7.2AI score0.00933EPSS
SaveExploits0References2
OSV
OSV
•added 2023/04/07 2:15 p.m.•11 views

CVE-2023-27806

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

4.9CVSS5.8AI score0.00787EPSS
SaveExploits0References1
OSV
OSV
•added 2023/04/07 2:15 p.m.•12 views

CVE-2023-27810

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

4.9CVSS5.8AI score0.00787EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/07 12:00 a.m.•0 views

PT-2023-21356

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005.bin Description A stack overflow was discovered via the ipqos lanip dellist interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted payload...

4.9CVSS0.00787EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/04/07 12:00 a.m.•17 views

PT-2023-21360 · H3C · H3C Magic R100

Name of the Vulnerable Software and Affected Versions: H3C Magic R100 version R100V100R005.bin Description: A stack overflow issue was discovered via the ipqos lanip editlist interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafte...

4.9CVSS5.1AI score0.00787EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/07 12:00 a.m.•15 views

H3C Magic R100 缓冲区错误漏洞

The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the ipqoslanipeditlist interface of /goform/aspForm. An attacker could exploit the...

4.9CVSS5.6AI score0.00787EPSS
SaveExploits0References2
CNVD
CNVD
•added 2023/03/17 12:00 a.m.•78 views

Tenda AX3 Command Injection Vulnerability (CNVD-2023-21670)

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. Tenda AX3 V16.03.12.11 suffers from a command injection vulnerability that stems from the lanip parameter of /goform/AdvSetLanip failing to correctly filter constructed command special characters, commands,...

9.8CVSS9.8AI score0.02773EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/15 6:15 a.m.•25 views

CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

9.8CVSS9.8AI score0.02773EPSS
SaveExploits1References1
Prion
Prion
•added 2023/03/15 6:15 a.m.•25 views

Command injection

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

7.5CVSS9.8AI score0.02773EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/03/15 12:00 a.m.•13 views

Tenda AX3 命令注入漏洞

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. Tenda AX3 V16.03.12.11 suffers from a command injection vulnerability that stems from the lanip parameter of /goform/AdvSetLanip failing to correctly filter constructed command special characters, commands,...

9.8CVSS8AI score0.02773EPSS
SaveExploits1References2
Rows per page
Query Builder