PT-2024-21414 · Casa Systems · Casa Systems Ntc-221

Name of the Vulnerable Software and Affected Versions: Casa Systems NTC-221 versions 2.0.99.0 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the "/www/cgi-bin/nas.cgi" component. This enables the attacker to potentially gain control...

Casa Systems NTC-221: Access Control Vulnerability

The Casa Systems NTC-221 is an industrial IoT router from Casa Systems, USA. A security vulnerability exists in Casa Systems NTC-221 version 2.0.99.0 and earlier, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a specially crafted payload in the...

CVE-2022-35518

The CVE-2022-35518 issue affects WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, and WN531P3 devices where nas.cgi does not filter parameters User1Passwd and User1 in /nas_disk.shtml, enabling command injection. Concrete details in connected sources show the root cause as unfiltered input leading to...

CVE-2022-35518

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nasdisk.shtml...

CVE-2022-35518: Improper Neutralization of Special Elements used in a Command

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nasdisk.shtml...