Lucene search
+L

777 matches found

CVE
CVE
•added 2024/01/25 12:00 a.m.•285 views

CVE-2024-22729

The NETIS SYSTEMS MW5360 4G LTE wireless router is vulnerable to command injection (CWE-77) in the web interface. The root cause is the improper handling of the password parameter on the login page. This allows unauthenticated remote attackers to execute arbitrary OS commands, potentially leading...

9.8CVSS9.8AI score0.70779EPSS
SaveIn wildExploits4References1Affected Software1
Cvelist
Cvelist
•added 2024/01/25 12:00 a.m.•53 views

CVE-2024-22729

NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page...

10AI score0.70779EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2024/01/25 12:00 a.m.•16 views

NETIS SYSTEMS MW5360 Security Vulnerability

NETIS SYSTEMS MW5360 is a 4G LTE wireless router. A security vulnerability exists in NETIS SYSTEMS MW5360 version V1.0.1.3031, which stems from the presence of a command injection vulnerability...

9.8CVSS7.5AI score0.70779EPSS
SaveExploits4References2
Metasploit
Metasploit
•added 2024/01/11 12:00 a.m.•273 views

Netis router MW5360 unauthenticated RCE.

Netis router MW5360 has a command injection vulnerability via the password parameter on the login page. The vulnerability stems from improper handling of the "password" parameter within the router's web interface. The router's login page authorization can be bypassed by simply deleting the...

9.8CVSS8.4AI score0.70779EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
•added 2023/11/15 12:00 a.m.•16 views

The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system allows a hacker to disclose protected information.

The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected information...

5.5CVSS5.5AI score0.00139EPSS
SaveExploits0References4
CNVD
CNVD
•added 2023/10/17 12:00 a.m.•46 views

Netis N3Mv2 Buffer Overflow Vulnerability

The Netis N3Mv2 is a router device. The Netis N3Mv2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service by sending a specially crafted request in the hostName parameter...

7.5CVSS7.3AI score0.00623EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/10/17 12:00 a.m.•46 views

Netis N3Mv2 Buffer Overflow Vulnerability (CNVD-2023-78311)

The Netis N3Mv2 is a router device. The Netis N3Mv2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service by sending a specially crafted request...

7.5CVSS7.3AI score0.00682EPSS
SaveExploits1References1
OSV
OSV
•added 2023/10/13 1:15 p.m.•13 views

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...

9.8CVSS5.8AI score0.01896EPSS
SaveExploits1References1
OSV
OSV
•added 2023/10/13 1:15 p.m.•12 views

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS6.1AI score0.00682EPSS
SaveExploits1References1
OSV
OSV
•added 2023/10/13 1:15 p.m.•12 views

CVE-2023-45464

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS6.1AI score0.00623EPSS
SaveExploits1References1
OSV
OSV
•added 2023/10/13 1:15 p.m.•18 views

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings...

9.8CVSS5.8AI score0.01842EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/13 1:15 p.m.•33 views

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

9.8CVSS9.8AI score0.01896EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/13 1:15 p.m.•33 views

CVE-2023-45464

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.6AI score0.00623EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/13 1:15 p.m.•24 views

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings...

9.8CVSS9.8AI score0.01842EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/13 1:15 p.m.•41 views

CVE-2023-45467

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...

9.8CVSS9.8AI score0.01896EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/13 1:15 p.m.•28 views

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.6AI score0.00682EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/13 1:15 p.m.•14 views

CVE-2023-45468

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.4AI score0.00682EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/10/13 1:15 p.m.•10 views

CVE-2023-45464

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.4AI score0.00623EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/10/13 1:15 p.m.•11 views

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

9.8CVSS7.3AI score0.01896EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/10/13 1:15 p.m.•8 views

CVE-2023-45465

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings...

9.8CVSS7.3AI score0.01842EPSS
SaveExploits1References2
Rows per page
Query Builder