10258 matches found
Command injection
An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection blind...
Command injection
An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...
Command injection
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-39222
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows:...
CVE-2023-39222
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows:...
Command injection
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows:...
CVE-2023-39222
CVE-2023-39222 relates to an OS command injection vulnerability in Furuno Systems’ wireless LAN access point devices, affecting multiple ACERA models (1320, 1310, 1210, 1150i, 1150w, 1110, 1020, 1010, 950, 850F, 900, 850M, 810, 800ST) when operating in ST (Standalone) mode. The authenticated atta...
CVE-2023-39222
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows:...
CVE-2023-33269
DTS Monitoring 3.57.0 is affected by an OS command injection in the WGET check function, due to unsafe handling of the options parameter. CVSS 3.1/9.8 indicates a high-severity, network-based vulnerability with no user interaction. Some sources recommend disabling the WGET check until a patch is ...
CVE-2023-33268
An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection blind...
CVE-2023-33272
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...
CVE-2023-33272
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...
CVE-2023-33272
CVE-2023-33272 affects DTS Monitoring 3.57.0. The vulnerability is an OS command injection (blind) in the Ping check function via the ip parameter. CVSS 3.1 base score 9.8 (CRITICAL) with NETWORK attack vector and no privileges required. Exploitation details are not provided in the available docu...
CVE-2023-33270
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection blind...
CVE-2023-33269
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-33268
An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection blind...
CVE-2023-33271
CVE-2023-33271 affects DTS Monitoring 3.57.0. The vulnerability is in the SSL Certificate check function, where the common_name parameter is vulnerable to blind OS command injection. If exploitable, this could allow an attacker to execute commands on the affected system. Mitigations referenced in...
CVE-2023-33268
CVE-2023-33268 affects DTS Monitoring 3.57.0. The vulnerability is in the SSL Certificate check function where the port parameter can be exploited to perform an OS command injection (blind). Impact details in connected sources align on the same issue; no exploit specifics or CVSS vectors beyond w...