ProSoft RLX-IFH24E unsigned upgrade package root RCE

Authenticated POST toolreprogramming.cgi with crafted upgradepkg; pre script runs attacker command as root during upgrade. """ProSoft RLX-IFH24E unsigned upgrade package pre-script root RCE.""" from future import annotations import base64 import gzip import hashlib import io import tarfile import...

ProSoft RLX-IFH24E v2.2.44 - Firmware Upgrade Package Executed Without Any Integ — Detect

Fingerprint / reachability check for ProSoft RLX-IFH24E v2.2.44 - Firmware Upgrade Package Executed Without Any Integrity Check, Reaching Root Command Execution and Full Overwrite of the Account Database CWE-494, CWE-345 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ProSoft RLX-IFH24...

ProSoft RLX-IFH24E version 2.2.44 Unsigned Upgrade Package Root Command Execution

ProSoft RLX-IFH24E version 2.2.44 firmware upgrades do not verify package authenticity, allowing an authenticated attacker to upload a crafted package that executes commands as root on the appliance. https://packetstorm.news/download/236509...

EUVD-2017-18960

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

EUVD-2017-18961

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20235

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

CVE-2017-20236

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20236 ProSoft Technology ICX35-HWC Command Injection via Web Interface

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20236

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20236 ProSoft Technology ICX35-HWC Command Injection via Web Interface

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20235 ProSoft Technology ICX35-HWC Authentication Bypass

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

CVE-2017-20235

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

CVE-2017-20235 ProSoft Technology ICX35-HWC Authentication Bypass

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

CVE-2017-20235

CVE-2017-20235 affects ProSoft Technology ICX35-HWC gateways (firmware version 1.3 and earlier). The issue is an authentication bypass in the web user interface that lets unauthenticated attackers access administrative functions and full device configuration without valid credentials. Affected co...

PT-2026-30259

Name of the Vulnerable Software and Affected Versions ProSoft Technology ICX35-HWC versions prior to 1.3 Description An authentication bypass exists in the web user interface of the cellular gateways. This flaw allows unauthenticated attackers to circumvent the authentication mechanism and gain...

ProSoft ICX35-HWC authorization issue vulnerability

The ProSoft ICX35-HWC is an industrial-grade cellular communication gateway device developed by ProSoft Corporation. Versions of ProSoft ICX35-HWC prior to version 1.3 contained an authorization vulnerability. This vulnerability stemmed from an authentication bypass issue in the web user interfac...

ProSoft ICX35-HWC operating system command injection vulnerability

The ProSoft ICX35-HWC is an industrial-grade cellular communication gateway device from the ProSoft company in the United States. Versions of ProSoft ICX35-HWC prior to version 1.3 contained a vulnerability related to operating system command injection. This vulnerability stemmed from input...

CVE-2017-20236: Improper Neutralization of Special Elements used in an OS Command

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20235: Improper Authentication

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

PT-2026-30260

Name of the Vulnerable Software and Affected Versions ProSoft Technology ICX35-HWC versions 1.3 and earlier Description An input validation flaw exists in the web user interface of the cellular gateway. This issue allows remote attackers to inject and execute system commands by submitting malicio...