CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36618

CVE-2023-36618 affects Atos Unify OpenScape Session Border Controller (SBC) through OpenScape V10 R3.01.03, where low-privileged authenticated users can execute OS commands as root due to an authentication deficiency. The issue is documented across multiple sources (Red Hat, NVD, CVE list) and is...

CVE-2023-4092: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data insert/update/delete, perform database administration operations and, in some cases, execute commands on the...

CVE-2023-21521: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability in the Management Console Operator Audit Trail of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database, recover the...

CVE-2023-40193

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-38563

Archer C1200 firmware versions prior to 'Archer C1200JPV2230508' and Archer C9 firmware versions prior to 'Archer C9JPV3230508' allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

CVE-2023-37284

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...

Design/Logic Flaw

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...

Design/Logic Flaw

Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

Design/Logic Flaw

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...

Design/Logic Flaw

Archer A10 firmware versions prior to 'Archer A10JPV2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802NJPV4221008', TL-WR841N firmware versions prior to 'TL-WR841NJPV14230506', and TL-WR902AC firmware...

Design/Logic Flaw

Archer AX6000 firmware versions prior to 'Archer AX6000JPV11.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-36489

TP-LINK TL-WR802N, TL-WR841N, and TL-WR902AC are affected by a network-adjacent, unauthenticated command-injection vulnerability. The issue affects TL-WR802N firmware before JP_V4_221008, TL-WR841N firmware before JP_V14_230506, and TL-WR902AC firmware before JP_V3_230506. Public disclosures cons...

CVE-2023-31188

CVE-2023-31188 affects TP-LINK Archer C50, Archer C55, and Archer C20 JP firmware. The root cause is a failure to neutralize special elements in the OS command path, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected firmwares include Archer C50(JP)_V3_2...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-38563

The CVE-2023-38563 entry concerns TP-LINK Archer C1200 and Archer C9 routers. Affected firmware versions prior to Archer C1200(JP)_V2_230508 and Archer C9(JP)_V3_230508 allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Practical impact is arbitrary commands execu...

CVE-2023-38588

Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-39224

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...