CVE-2023-44221

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...

Command injection

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...

CVE-2023-44221

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...

CVE-2023-44221

The CVE-2023-44221 entry concerns SonicWall SMA100 appliances with the SSL-VPN management interface. A vulnerability in improper neutralization of special elements allows a remote authenticated attacker with administrative privileges to inject arbitrary commands as a nobody user, enabling OS Comm...

CVE-2023-44221

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a ‘nobody’ user, potentially leading to OS Command Injection Vulnerability. Recent assessments: Assessed...

CVE-2023-44291

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application...

CVE-2023-44291

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application...

CVE-2023-44291

Dell PowerProtect Data Manager DM5500 (v5.14.0.0) is affected by an OS command injection in the PPOE component. The root cause is improper neutralization of special characters in commands, allowing a remote, high-privilege attacker with network access to run arbitrary OS commands on the underlyin...

PT-2023-9076 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions prior to 10.2.1.10-62sv Description: The issue is related to the improper neutralization of special elements in the SMA100 SSL-VPN management interface, allowing a remote authenticated attacker with administrative...

CVE-2023-4473

A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted URL to a vulnerable device...

Input validation

The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted URL to a vulnerable device...

CVE-2023-4474

CVE-2023-4474 affects Zyxel NAS326 and NAS542 devices. The root cause is improper neutralization of special elements in the WSGI server, allowing an unauthenticated attacker to execute OS commands by sending a crafted URL. Affected firmwares: NAS326 up to V5.21(AAZF.14)C0 and NAS542 up to V5.21(A...

CVE-2023-35138

CVE-2023-35138 describes a command-injection vulnerability in Zyxel NAS326 (firmware v5.21(AAZF.14)C0 and earlier) and NAS542 (firmware v5.21(ABAG.11)C0 and earlier) where the function show_zysync_server_contents can be abused by an unauthenticated attacker to run OS commands via a crafted HTTP P...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

CVE-2023-3741

The CVE-2023-3741 entry describes an OS command injection vulnerability in NEC Platforms DT900 and DT900S Series IP phones (all versions), allowing an attacker to execute arbitrary commands on the device. According to connected sources, exploitation is possible over the network with no privileges...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

INEA ME RTU Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-35762)

Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system OS command injection, which could allow remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection.This issue affects Panorama: before 8.0...

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...