4627 matches found
CVE-2023-43477 Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)
The pingfrom parameter of pingtracerte.cgi in the web UI of Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device...
PT-2023-28838 · Telstra · Telstra Smart Modem Gen 2
Name of the Vulnerable Software and Affected Versions: Telstra Smart Modem Gen 2 Arcadyan LH1000 versions prior to 0.18.15r Description: The issue allows unauthenticated attackers to upload firmware images and configuration backups, potentially leading to code execution as root. This could enable...
Telstra Smart Modem Code Issue Vulnerability
Telstra Smart Modem is a smart modem from Telstra. A security vulnerability exists in Telstra Smart Modem Gen 2 firmware prior to version 0.18.15r, which originates from a vulnerability that could allow an authenticated attacker to alter the firmware or configuration on the device and execute cod...
Telstra Smart Modem Command Injection Vulnerability
Telstra Smart Modem is a smart modem from Telstra. A security vulnerability exists in Telstra Smart Modem Gen 2 firmware prior to version 0.18.15r, which originates from a vulnerability that allows an authenticated attacker to achieve command injection as root via the pingfrom parameter...
CVE-2023-43478: Unrestricted Upload of File with Dangerous Type
fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...
PT-2023-28837
Name of the Vulnerable Software and Affected Versions Telstra Smart Modem Gen 2 Arcadyan LH1000 versions prior to 0.18.15r Description The ping from parameter of ping tracerte.cgi in the web UI was not properly sanitized before being used in a system call, which could allow an authenticated...
CVE-2023-43477: Improper Neutralization of Special Elements used in a Command
The pingfrom parameter of pingtracerte.cgi in the web UI of Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device...
CVE-2023-37367
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. In the NAS Task, an improperl...
Security feature bypass
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. In the NAS Task, an improperl...
SAMSUNG Exynos Security Breach
SAMSUNG Exynos is a SoC, Arm architecture-based processor developed and manufactured by Samsung Mobile, a South Korean company. A security vulnerability exists in the SAMSUNG Exynos Mobile Processor, Automotive Processor, and Modem, which stems from improperly performed standard security checks a...
CVE-2023-37367
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. In the NAS Task, an improperl...
CVE-2023-37367
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. In the NAS Task, an improperl...
CVE-2023-37368
The CVE-2023-37368 issue affects Samsung Exynos Mobile/Automotive/Modem SoCs (multiple Exynos SKUs listed). In the Shannon MM Task, there is missing validation of a NULL pointer, which can cause abnormal termination via a malformed NR MM packet. Impact is denial of service due to crash; no explic...
CVE-2023-4498
Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...
CVE-2023-4498 Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router
Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...
CVE-2023-4498 Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router
Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...
CVE-2023-4498
CVE-2023-4498 affects the Tenda N300 Wireless N VDSL2 Modem Router. A crafted request containing a whitelisted keyword in the URL can bypass authentication, letting a remote, unauthenticated attacker access pages that should require authentication and potentially read sensitive information (e.g.,...
PT-2023-29327
Name of the Vulnerable Software and Affected Versions Tenda N300 Wireless N VDSL2 Modem Router affected versions not specified Description The issue allows unauthenticated access to pages that should be accessible to authenticated users only. Recommendations At the moment, there is no information...
CVE-2023-4498: Improper Authentication
Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...