41 matches found
Extreme NetConfig UI Panel - Detect
Extreme NetConfig UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Extreme NetConfig UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Extreme NetConfig UI Panel - Detect',...
Aerohive NetConfig UI Detection
An Aerohive NetConfig user interface was detected. The NetConfig UI provides a fundamental set of configurations for configuring basic network and HiveManager connectivity settings, and uploading new IQ Engine images to Extreme Networks APs. !/usr/bin/env python3 -- coding: utf-8 -- """An Aerohiv...
CVE-2020-36907
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
CVE-2020-36907
CVE-2020-36907 affects Aerohive HiveOS NetConfig UI. An unauthenticated attacker can trigger a denial-of-service by sending crafted parameters to action.php5, causing a 5-minute web interface disruption. The CVE is described with network-based access, low attack complexity, and no privileges requ...
CVE-2020-36907 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
CVE-2020-36907
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
CVE-2020-36907 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
Extreme Aerohive HiveOS security vulnerabilities
Extreme Aerohive HiveOS is a specialized operating system from Extreme, Inc. A security vulnerability exists in Extreme Aerohive HiveOS, which stems from a denial of service vulnerability in NetConfig UI that could make the web interface unavailable...
PT-2026-1442
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
CVE-2020-36907: Allocation of Resources Without Limits or Throttling
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
Beetel Connection Manager security vulnerabilities
Beetel Connection Manager is a network connection management tool from Beetel. A security vulnerability exists in Beetel Connection Manager that originates from improper boundary checking when parsing the NetConfig.ini file, which could lead to arbitrary code execution...
CVE-2025-3008 Novastar CX40 NetFilter Utility netconfig popen command injection
A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be...
PT-2025-13817
Name of the Vulnerable Software and Affected Versions Novastar CX40 versions up to 2.44.0 Description A critical vulnerability has been found in the NetFilter Utility component of Novastar CX40. The issue affects the system/popen function of the /usr/nova/bin/netconfig file, leading to command...
CVE-2025-3008: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be...
CVE-2025-3007: Stack-based Buffer Overflow
A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...
Metasploit Wrap-Up
Azure Active Directory login scanner module Community contributor k0pak4 added a new login scanner module for Azure Active Directory. This module exploits a vulnerable authentication endpoint in order to enumerate usernames without generating log events. The error code returned by the endpoint ca...
Aerohive NetConfig 10.0r8a Local File Inclusion / Remote Code Execution Exploit
This Metasploit module exploits local file inclusion and log poisoning vulnerabilities CVE-2020-16152 in Aerohive NetConfig, version 10.0r8a build-242466 and older in order to achieve unauthenticated remote code execution as the root user. NetConfig is the Aerohive/Extreme Networks HiveOS...
CVE-2020-16152
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...
CVE-2020-16152
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...
Code injection
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...