CVE-2023-43893

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeupmac parameter in the Wake-On-LAN WoL function. This vulnerability is exploited via a crafted payload...

PT-2023-29031 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via a crafted payload, specifically through the Hostname parameter within the WAN settings...

PT-2023-29030 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a command injection vulnerability in the Changing Username and Password function. This vulnerability can be exploited via a crafted payload. Recommendations: For Netis N3Mv2...

PT-2023-29032 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: A command injection issue was discovered in the Wake-On-LAN WoL function via the wakeup mac parameter. This issue can be exploited using a crafted payload. Recommendations: For Netis N3Mv2 version...

NETIS SYSTEMS N3 Operating System Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. An operating system command injection vulnerability exists in the Netis N3Mv2-V.1.0.1.865 version, which stems from a command injection vulnerability in the diagnostic tools page...

CVE-2023-43891

Netis N3Mv2, version 1.0.1.865, contains a command injection in the Changing Username and Password function, exploitable via a crafted payload. CVSS v3.1 base score 9.8 (CRITICAL) with network access, no privileges, no user interaction required. Root cause: input handling in the affected function...

CVE-2023-43893

CVE-2023-43893 concerns Netis N3Mv2-V1.0.1.865, where the Wake-On-LAN (WoL) function’s wakeup_mac parameter is vulnerable to command injection via a crafted payload. The issue is described across multiple sources (NVD, Red Hat, CVE List, CNNVD, etc.) as a router/network device vulnerability with ...

CVE-2023-43892

The CVE-2023-43892 issue affects Netis N3Mv2-V1.0.1.865, where a command injection vulnerability exists in the Hostname parameter of WAN settings. The root cause, as described across sources, is that a crafted payload can trigger command execution, yielding potential high impact to confidentialit...

PT-2023-29029

Name of the Vulnerable Software and Affected Versions Netis N3Mv2 version 1.0.1.865 Description A command injection issue was discovered in the diagnostic tools page of the affected software. This issue can be exploited through a crafted HTTP request. Recommendations For version 1.0.1.865, consid...

CVE-2023-43890: Improper Neutralization of Special Elements used in an OS Command

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request...

CVE-2023-43893: Improper Neutralization of Special Elements used in an OS Command

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeupmac parameter in the Wake-On-LAN WoL function. This vulnerability is exploited via a crafted payload...

CVE-2023-43892: Improper Neutralization of Special Elements used in an OS Command

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

NETIS SYSTEMS N3 Operating System Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. An operating system command injection vulnerability exists in the Netis N3Mv2-V.1.0.1.865 version, which stems from a command injection vulnerability in the wakeupmac parameter...

CVE-2023-43890

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request...

CVE-2023-43891: Improper Neutralization of Special Elements used in a Command

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This vulnerability is exploited via a crafted payload...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

Design/Logic Flaw

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134: Missing Authorization

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...