CVE-2023-22304

OS command injection vulnerability in PIX-RT100 versions RT100TEQ2.1.1EQ101 and RT100TEQ2.1.2EQ101 allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command...

CVE-2023-22304

CVE-2023-22304 affects PIXELA PIX-RT100 devices, specifically RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101. The vulnerability is an OS command injection that allows a network-adjacent attacker who can access product settings to execute arbitrary OS commands. The exact root cause is described a...

CVE-2023-22316

Hidden functionality vulnerability in PIX-RT100 versions RT100TEQ2.1.1EQ101 and RT100TEQ2.1.2EQ101 allows a network-adjacent attacker to access the product via undocumented Telnet or SSH services...

PT-2023-18412 · Pix-Rt100 · Pix-Rt100

Name of the Vulnerable Software and Affected Versions: PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 and RT100 TEQ 2.1.2 EQ101 Description: The issue allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command. This is an OS command injection vulnerability...

CVE-2023-22316

The PIX-RT100 vulnerability CVE-2023-22316 describes a hidden functionality issue where a network-adjacent attacker can access the device via undocumented Telnet or SSH on PIX-RT100 releases RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101. The root cause is an undocumented service exposure that e...

PT-2023-18424 · Pix-Rt100 · Pix-Rt100

Name of the Vulnerable Software and Affected Versions: PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 through RT100 TEQ 2.1.2 EQ101 Description: The issue concerns a hidden functionality vulnerability that enables a network-adjacent attacker to access the product. This access is achieved through...

Multiple vulnerabilities in PIXELA PIX-RT100

Overview PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Backdoor access issue CWE-912 - CVE-2023-22316 MASAHIRO IIDA of LAC Co.,Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the develop...

JVN#57296685: Multiple vulnerabilities in PIXELA PIX-RT100

PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.0 CVSS v2| AV:A/AC:L/Au:S/C:C/I:C/A:C| Base Score: 7.7...

Beware: Cybercriminals Launch New BrasDex Android Trojan Targeting Brazilian Banking Users

The threat actors behind the Windows banking malware known as Casbaneiro has been attributed as behind a novel Android trojan called BrasDex that has been observed targeting Brazilian users as part of an ongoing multi-platform campaign. BrasDex features a "complex keylogging system designed to...

Pix-Link MiNi Router 28K.MiniRouter.20190211 Cross-Site Scripting Vulnerability

Pix-Link MiNi Router 28K.MiniRouter.20190211 is a router from Pix-Link China.Pix-Link MiNi Router 28K.MiniRouter.20190211 is vulnerable to a cross-site scripting vulnerability that originates from an unprocessed SSID parameter. An attacker could exploit the vulnerability to execute JavaScript cod...

Pix-Link MiniRouter 28K.MiniRouter.20190211 Cross-Site Scripting Vulnerability (CNVD-2022-77885)

Pix-Link MiNi Router 28K.MiniRouter.20190211 is a router from Pix-Link China.Pix-Link MiniRouter 28K.MiniRouter.20190211 suffers from a cross-site scripting vulnerability, which stems from an unhandled security key parameter. An attacker could exploit the vulnerability to execute JavaScript code ...

CVE-2021-43728

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized SSID parameter...

CVE-2021-43729

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized Security Key parameter...

CVE-2021-43729

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized Security Key parameter...

CVE-2021-43728

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized SSID parameter...

Cross site scripting

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized SSID parameter...

Cross site scripting

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized Security Key parameter...

CVE-2021-43728

CVE-2021-43728 affects Pix-Link MiNi Router 28K.MiniRouter.20190211. The vulnerability is a stored cross-site scripting (XSS) flaw caused by an unsanitized SSID parameter, enabling injected JavaScript to be executed in the context of the user’s browser. No exploit details are provided in the avai...

CVE-2021-43728

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized SSID parameter...

CVE-2021-43729

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized Security Key parameter...