CVE-2023-4411 TOTOLINK EX1200L setTracerouteCfg os command injection

A vulnerability has been found in TOTOLINK EX1200L ENV9.3.5u.6146B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2023-4411

The CVE-2023-4411 vulnerability affects TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023, enabling remote OS command injection via the setTracerouteCfg function. Exploitation requires no user interaction beyond remote access; multiple sources confirm public disclosure. The root cause is input handling ...

CVE-2023-4410 TOTOLINK EX1200L setDiagnosisCfg os command injection

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L ENV9.3.5u.6146B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

CVE-2023-4410 TOTOLINK EX1200L setDiagnosisCfg os command injection

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L ENV9.3.5u.6146B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

CVE-2023-4410

TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 contains a vulnerability in the setDiagnosisCfg function that allows OS command injection. The issue can be triggered remotely over the network and has been publicly disclosed (CVE-2023-4410). Multiple sources corroborate the same description, including ...

CVE-2023-40072

CVE-2023-40072 is an OS command injection in ELECOM wireless LAN access point devices. An authenticated user can send a specially crafted request to execute arbitrary OS commands on affected devices. Reported affected products include ELECOM WAB-S600-PS and WAB-S300 (all versions) with broader EL...

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

CVE-2023-40069

CVE-2023-40069 affects ELECOM WRC-F1167ACF, WRC-1750GHBK, WRC-1167GHBK2, WRC-1750GHBK2-I, and WRC-1750GHBK-E all versions. It is an OS command injection vulnerability in ELECOM wireless LAN routers allowing an attacker who can access the product to execute arbitrary OS commands by sending a speci...

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

CVE-2023-39944

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-39944

CVE-2023-39944 affects ELECOM WRC-F1167ACF and WRC-1750GHBK (all versions) and allows an attacker who can access the device to execute arbitrary OS commands by sending a specially crafted request. The issue is described as an OS command injection vulnerability; the root cause and affected softwar...

CVE-2023-39455

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all...

CVE-2023-39455

CVE-2023-39455 is an OS command injection affecting ELECOM WRC-600GHBK-A, WRC-1467GHBK-A, WRC-1900GHBK-A, WRC-733FEBK2-A, WRC-F1167ACF2, WRC-1467GHBK-S, and WRC-1900GHBK-S. Affected versions are all versions for these models; an authenticated user can trigger arbitrary OS commands by sending a sp...

PT-2023-29114 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200L version EN V9.3.5u.6146 B20201023 Description: A critical issue affects the setWanCfg function, leading to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

PT-2023-26957 · Elecom · Elecom Wrc-1900Ghbk-S +6

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-600GHBK-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM WRC-1900GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-F1167ACF2 all versions ELECOM WRC-1467GHBK-S all versions ELECOM WRC-1900GHBK-S all versions...

JVN#19661362: Multiple vulnerabilities in Proself

Proself provided by North Grid Corporation is an online storage server software. Proself contains multiple vulnerabilities listed below. Improper authentication CWE-287 - CVE-2023-39415 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 7.5 CVSS...

PT-2023-27246 · Elecom · Elecom Wrc-F1167Acf +3

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-F1167ACF all versions ELECOM WRC-1750GHBK all versions ELECOM WRC-1167GHBK2 all versions ELECOM WRC-1750GHBK2-I all versions ELECOM WRC-1750GHBK-E all versions Description: An OS command injection vulnerability in ELECOM wireless L...

Multiple vulnerabilities in ELECOM and LOGITEC network devices

Overview Multiple network devices provided by ELECOM CO.,LTD. and LOGITEC CORPORATION contain multiple vulnerabilities listed below. Hidden Functionality CWE-912 - CVE-2023-32626, CVE-2023-35991, CVE-2023-39445 Telnet service access restriction failure CWE-284 - CVE-2023-38132 Hidden Functionalit...

CVE-2023-3267

CVE-2023-3267 affects CyberPower PowerPanel Enterprise DCIM. The vulnerability is an OS command injection where an authenticated user can place arbitrary commands in the username field, which is passed un-sanitized into CMD running with SYSTEM privileges. This yields authenticated remote code exe...