CVE-2021-36706: Improper Neutralization of Special Elements used in an OS Command

In ProLink PRC2402M V1.0.18 and older, the setsyscmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is passed directly to system...

PT-2021-21316

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set TR069 function within the adm.cgi binary. This function is accessible when the page parameter is set to TR069. Specifically, the value of...

PT-2021-21318

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set ledonoff function within the adm.cgi binary. This function is accessible with a page parameter value of ledonoff. The led cmd parameter's...

CVE-2021-36707: Improper Neutralization of Special Elements used in a Command

In ProLink PRC2402M V1.0.18 and older, the setledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the ledcmd parameter is passed directly to dosystem...

ProLink PRC2402M 授权问题漏洞

ProLink PRC2402M is a router from ProLink Singapore. An information disclosure vulnerability exists in the setsysinit function in the login.cgi binary file of ProLink PRC2402M 1.0.18 and prior versions. An attacker can exploit this vulnerability to reset the password in the administrator interfac...

PT-2021-21319

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue allows an attacker to reset the password to the administrative interface of the router. This is possible due to a problem in the set sys init function in the login.cgi binary...

ProLink PRC2402M 命令注入漏洞

ProLink PRC2402M is a router from ProLink Singapore. A command injection vulnerability exists in the setTR069 function in the adm.cgi binary file of ProLink PRC2402M 1.0.18 and prior versions. An attacker can exploit this vulnerability to cause command injection by passing the TR069localport...

CVE-2021-36705: Improper Neutralization of Special Elements used in an OS Command

In ProLink PRC2402M V1.0.18 and older, the setTR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the value of the TR069localport parameter is passed directly to system...

PT-2021-21317

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set sys cmd function within the adm.cgi binary. This function is accessible when the page parameter is set to sysCMD, allowing the command...

CVE-2021-36708: Weak Password Recovery Mechanism for Forgotten Password

In ProLink PRC2402M V1.0.18 and older, the setsysinit function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router...