CVE-2022-4221

CVE-2022-4221 concerns ASUS NAS-M25 prior to 1.0.1.7, where an improper neutralization of special elements in OS commands allows an unauthenticated attacker to inject commands via unsanitized cookie values. Affected component is the OS command execution path tied to cookie handling. Documented im...

CVE-2022-4221 OS command injection in ASUS M25 NAS

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

PT-2022-26313 · Asus · Asus Nas-M25

Name of the Vulnerable Software and Affected Versions: Asus NAS-M25 versions through 1.0.1.7 Description: The issue is related to an improper neutralization of special elements used in an OS command, allowing an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie value...

Free5gc vulnerable to uncontrolled resource consumption

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

GHSA-M74X-FXJH-3QH9 Free5gc vulnerable to uncontrolled resource consumption

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

Design/Logic Flaw

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

CVE-2022-38871 affects Free5gc v3.0.5, where the AMF can break due to malformed NAS messages. The issue is limited to the AMF component and is described with a high impact on availability (CVE score 7.5, network attack vector, no privileges required). The provided documents consistently describe ...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

Synology DiskStation Manager (DSM) < 7.1.1-42962-2 Multiple Vulnerabilities (Synology-SA-22:17) - Remote Known Vulnerable Versions Check

Multiple Synology NAS devices running DiskStation Manager DSM are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Synology DiskStation Manager (DSM) Detection (UPnP)

UPnP based detection of Synology NAS devices, DiskStation Manager DSM OS and application. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Raspberry Robin worm used as ransomware prelude

Raspberry Robin aka Worm.RaspberyRobin started out as an annoying, yet relatively low-profile threat that was often installed via USB drive. First spotted in September 2021, it was typically introduced into a network through infected removable drives, often USB devices. Now the worm has been foun...

Synology NAS / DiskStation Manager (DSM) Detection Consolidation

Consolidation of Synology NAS devices, DiskStation Manager DSM OS and application detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2022-23771

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

CVE-2022-23771

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

Design/Logic Flaw

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

CVE-2022-23771

This CVE-2022-23771 entry relates to ipTIME NAS products and describes a CSRF-like flaw on user account creation/deletion pages. The vulnerability stems from insufficient validation of POST requests, enabling an attacker to delete user accounts or escalate privileges. The connected documents corr...

CVE-2022-23771 IPTIME NAS1DUAL CSRF Vulnerability

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...