EUVD-2018-6669

Malware in sbrugna...

EUVD-2018-6666

Malware in sbrugna...

Cross site request forgery (csrf)

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely...

CVE-2018-14785

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication...

CVE-2018-14782

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device allows access to configuration files and profiles without authenticating the user...

CVE-2018-14783

CVE-2018-14783 is a Cross-Site Request Forgery vulnerability in NetComm NWL-25 4G LTE Light Industrial M2M Router. AFFECTED PRODUCTS: NWL-25 with firmware 2.0.29.11 and earlier. ROOT CAUSE/IMPACT: CSRF allows an attacker to remotely change the device password, with high impact (C/H, I/H, A/H in C...

CVE-2018-14783

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely...

CVE-2018-14782

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device allows access to configuration files and profiles without authenticating the user...

CVE-2018-14783: Cross-Site Request Forgery (CSRF)

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely...

CVE-2018-14785: Exposure of Information Through Directory Listing

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication...

CVE-2018-14784: Improper Neutralization of Input During Web Page Generation

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-site scripting attacks, allowing a remote attacker to run arbitrary code on the device...

CVE-2018-14782: Exposure of Sensitive Information to an Unauthorized Actor

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device allows access to configuration files and profiles without authenticating the user...

PT-2018-1457

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description The issue is related to the device's vulnerability to cross-site scripting attacks, which allows a remote attacker to run arbitrary code on the...

PT-2018-1456

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description The issue is related to the disclosure of information through directory listing without authentication. This allows a remote attacker to gain...

PT-2018-1458

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely. This issue is related to the...

PT-2018-1459

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description The issue is related to insufficient protection of configuration data, allowing unauthorized access to configuration files and profiles without...