Lucene search
+L

4632 matches found

CVE
CVE
•added 2024/11/20 9:36 a.m.•85 views

CVE-2024-11494

CVE-2024-11494 affects Zyxel P-6101C ADSL modem, specifically firmware version P-6101CSA6AP_20140331. The vulnerability is described as improper authentication that could allow an unauthenticated attacker to read certain device information via a crafted HTTP HEAD request. The CVSS 3.1 vector is N...

7.5CVSS6.9AI score0.00676EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•8 views

CVE-2024-11494: Improper Authentication

UNSUPPORTED WHEN ASSIGNED The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP20140331 could allow an unauthenticated attacker to read some device information via a crafted HTTP HEAD method...

7.5CVSS7.2AI score0.00676EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/11/18 12:00 a.m.•19 views

D-Link DSL6740C Security Bypass Info Disclosure

The vulnerability of D-Link DSL6740C modem’s microprogramming software is related to the possibility of bypassing security measures. Exploiting this vulnerability allows a malicious actor to read arbitrary system files, obtain the device’s MAC address, and attempt to log into the system using...

7.8CVSS5.6AI score0.01274EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/18 12:00 a.m.•17 views

D-Link DSL6740C SSH Telnet Command Execution

The vulnerability of SSH and Telnet protocols implemented by the microprogramming software of the D-Link DSL6740C modem lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS5.9AI score0.01363EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/11/17 12:00 a.m.•31 views

D-Link DSL6740C Software Arbitrary Command Execution

The vulnerability of the D-Link DSL6740C modem’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to remotely inject and execute arbitrary system...

9CVSS5.8AI score0.01787EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/11/13 12:00 a.m.•28 views

D-Link DSL6740C Privileged API Error

The vulnerability of the D-Link DSL6740C modem’s microprogramming software is related to errors that occur when privileged application programming interfaces APIs are used. Exploiting this vulnerability can allow a malicious actor to gain access to the device by sending a specially crafted API...

10CVSS5.5AI score0.01166EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/11 8:15 a.m.•41 views

CVE-2024-11068

The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account...

9.8CVSS0.01166EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/11 8:15 a.m.•25 views

CVE-2024-11062

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet...

7.2CVSS0.01363EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/11 7:35 a.m.•82 views

CVE-2024-11064

The CVE-2024-11064 entry concerns the D-Link DSL6740C modem with an OS Command Injection flaw. Public documents describe an issue in the firmware where a vulnerability in the SSH/Telnet functionality allows a remote attacker with administrator privileges to inject and execute arbitrary system com...

7.2CVSS7.5AI score0.01363EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/11 7:30 a.m.•16 views

CVE-2024-11063 D-Link DSL6740C - OS Command Injection

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet...

7.2CVSS8.2AI score0.01363EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/11 7:28 a.m.•85 views

CVE-2024-11062

The CVE-2024-11062 entry concerns a OS command injection in the D-Link DSL6740C modem. The vulnerability allows remote attackers with administrator privileges to inject and execute arbitrary system commands via specific functions exposed by SSH and Telnet. Root cause per connected sources appears...

7.2CVSS7.5AI score0.01363EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/11/11 7:28 a.m.•48 views

CVE-2024-11062 D-Link DSL6740C - OS Command Injection

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet...

7.2CVSS0.01363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•26 views

PT-2024-8173 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C modem affected versions not specified Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a...

9CVSS8.2AI score0.01363EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•33 views

PT-2024-8176 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C modem affected versions not specified Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a...

9CVSS8.2AI score0.01363EPSS
SaveExploits0References17
osv_cve
osv_cve
•added 2024/11/06 3:15 a.m.•13 views

CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/06 3:15 a.m.•48 views

CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

5.5CVSS0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/06 2:16 a.m.•38 views

CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

4.1CVSS0.00133EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/06 2:16 a.m.•18 views

CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

4.1CVSS6.6AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/06 2:16 a.m.•68 views

CVE-2024-34673

CVE-2024-34673 concerns the Modem’s IpcProtocol with improper input validation, affecting versions prior to SMR Nov-2024 Release 1. The vulnerability enables a local attacker to trigger a Denial-of-Service. The PT-2024-26094 entry confirms the affected software family as Modem and specifies the v...

5.5CVSS4.4AI score0.00133EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/06 12:00 a.m.•7 views

CVE-2024-34673: Undefined Security Weakness

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
Rows per page
Query Builder