CVE-2025-54958

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is exploited, arbitrary OS commands may be executed on the affected product...

CVE-2025-54958

Powered BLUE 870 by Mubit co.,ltd. contains an OS command injection vulnerability (CWE-78) in versions 0.20130927 and earlier. An authenticated user could execute arbitrary OS commands on the affected product. {Root cause: improper handling of input leading to command injection per CVE-2025-54958...

CVE-2024-58257

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58256

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58255

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58255

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58255

CVE-2024-58255 is an OS command injection vulnerability affecting Huawei EnzoH devices (e.g., EnzoH-W5611T). The root cause, as described in CNVD, is that certain variables in a get variable are set directly without validation, enabling arbitrary command execution if exploited locally. Several so...

CVE-2024-58257

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58257

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58257

CVE-2024-58257 affects Huawei EnzoH OS by a local, high-privilege OS command injection flaw that can yield arbitrary command execution. The CVSS metrics (NVD) indicate Local access, Low attack complexity, High privileges required, no user interaction, with impact to confidentiality, integrity, an...

CVE-2024-58256

CVE-2024-58256 concerns Huawei EnzoH, reporting an OS command injection vulnerability in the EnzoH operating system. Exploitation may lead to arbitrary command execution with high impact. Documents consistently describe the issue as OS command injection affecting EnzoH; however, concrete details ...

PT-2025-32341 · Enzoh · Enzoh

Name of the Vulnerable Software and Affected Versions: EnzoH affected versions not specified Description: EnzoH contains an OS command injection flaw. Successful exploitation of this flaw may lead to arbitrary command execution. Recommendations: At the moment, there is no information about a newe...

PT-2025-32342 · Enzoh · Enzoh

Name of the Vulnerable Software and Affected Versions: EnzoH affected versions not specified Description: EnzoH contains an OS command injection vulnerability. Successful exploitation of this issue may lead to arbitrary command execution. Recommendations: At the moment, there is no information...

Huawei EnzoH 安全漏洞

Founded in 1987 and headquartered in Shenzhen, Guangdong Province, China, Huawei is a leading global provider of ICT information and communications technology infrastructure and smart terminals, with operations in more than 170 countries and regions and serving more than 3 billion people worldwid...

JVN#39636188: Multiple vulnerabilities in Mubit Powered BLUE 870

Powered BLUE 870 provided by Mubit co.,ltd. contains multiple vulnerabilities listed below. OS command injection CWE-78 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Base Score 6.3 CVE-2025-54958 Path traversal CWE-22...

PT-2025-32343 · Enzoh · Enzoh

Name of the Vulnerable Software and Affected Versions: EnzoH affected versions not specified Description: EnzoH contains an OS command injection flaw. Successful exploitation may lead to arbitrary command execution. Recommendations: At the moment, there is no information about a newer version tha...

CVE-2025-34152

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...

CVE-2025-34148

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject...

CVE-2025-34148

CVE-2025-34148 concerns an unauthenticated OS command-injection in the Shenzhen Aitemi M300 Wi‑Fi Repeater (hardware model MT02) when configured in WISP mode. The vulnerability stems from the unsanitized handling of the ssid parameter being passed to system-level scripts, enabling remote attacker...

CVE-2025-34148 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject...