CVE-2025-43978

Jointelli 5G CPE 21H01 firmware JY21H01A3v1.36 devices allow blind OS command injection. Multiple endpoints are vulnerable, including /ubus/?flag=setWPSpin and /ubus/?flag=netAppStar1 and /ubus/?flag=setwificfgs. This allows an authenticated attacker to execute arbitrary OS commands with root...

CVE-2025-43978

Jointelli 5G CPE 21H01 firmware JY_21H01_A3_v1.36 is affected by a blind OS command injection affecting multiple endpoints (including /ubus/?flag=set_WPS_pin, /ubus/?flag=netAppStar1, /ubus/?flag=set_wifi_cfgs). An authenticated attacker can execute arbitrary OS commands with root privileges by s...

PT-2025-31946

Name of the Vulnerable Software and Affected Versions Jointelli 5G CPE 21H01 firmware version 1.36 Description Jointelli 5G CPE 21H01 firmware version 1.36 contains a blind OS command injection issue. Multiple API endpoints are vulnerable, including /ubus/?flag=set WPS pin, /ubus/?flag=netAppStar...

Jointelli 5G CPE 21H01 安全漏洞

The Jointelli 5G CPE 21H01 is a router from the Chinese company Jointelli. A security vulnerability exists in the Jointelli 5G CPE 21H01 JY21H01A3v1.36 version, which stems from the presence of OS command injection on multiple endpoints that could lead to the execution of arbitrary commands...

CVE-2025-43978

Jointelli 5G CPE 21H01 firmware JY21H01A3v1.36 devices allow blind OS command injection. Multiple endpoints are vulnerable, including /ubus/?flag=setWPSpin and /ubus/?flag=netAppStar1 and /ubus/?flag=setwificfgs. This allows an authenticated attacker to execute arbitrary OS commands with root...

CVE-2025-34147

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

CVE-2025-34147 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

CVE-2025-34147 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

CVE-2025-44961

In RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user...

CVE-2025-30097

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30098

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30099

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30096

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30099

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30099

CVE-2025-30099 affects Dell PowerProtect Data Domain with DD OS (Feature Release 7.7.1.0–8.1.0.10; LTS2024 7.13.1.0–7.13.1.25; LTS 2023 7.10.1.0–7.10.1.50) and is due to an Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) in the DDSH CLI. A low-privilege, l...

CVE-2025-30098

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30098

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30098

Dell PowerProtect Data Domain (DD OS) is affected by CVE-2025-30098: an Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in the DDSH CLI. A high-privilege attacker with local access could exploit this to execute arbitrary commands with root pr...

CVE-2025-30097

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-30097

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...