CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

CVE-2024-54983

An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message...

CVE-2023-26921

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

CVE-2021-31698

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectelhandlefumocfg input in atfwddaemon...

CVE-2021-45815

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2024-54983

An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message...

CVE-2024-54984

An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message. NOTE: this is disputed by the supplier...

CVE-2024-54982

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

CVE-2024-54983

An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message...

CVE-2024-54984

An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message. NOTE: this is disputed by the supplier...

CVE-2024-54982

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

CVE-2024-54982

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products...

CVE-2024-54983

The CVE-2024-54983 entry affects Quectel BC95-CNV V100R001C00SPC051, where a crafted NAS message can bypass authentication. Documents consistently describe an authentication bypass in this specific firmware version. The core issue is a failure in validating NAS messages, enabling potential unauth...

CVE-2024-54982

The CVE-2024-54982 issue affects Quectel BC25 firmware version BC25PAR01A06, where authentication can be bypassed via a crafted NAS message. Root cause details in the connected PT-2024-36457 disclosure describe a NAS-based authentication bypass affecting BC25PAR01A06; no other product versions ar...

CVE-2024-54983

An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message...

CVE-2024-54984

The CVE-2024-54984 entry concerns Quectel BG96 (BG96MAR02A08M1G). Description: an issue in the BG96 firmware allows authentication to be bypassed by a crafted NAS message, with the supplier disputing the flaw. Root cause: authentication bypass arises from NAS message handling within BG96. Impact ...

Quectel BG96 安全漏洞

The Quectel BG96 is a LTE Cat M1/Cat NB1/EGPRS wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BG96 BG96MAR02A08M1G version that originates from a vulnerability that allows an attacker to bypass authentication via a crafted NA...

PT-2024-36459 · Quectel · Quectel Bg96

Name of the Vulnerable Software and Affected Versions: Quectel BG96 version BG96MAR02A08M1G Description: An issue in Quectel BG96 allows attackers to bypass authentication via a crafted NAS message. The supplier disputes this issue. Recommendations: For Quectel BG96 version BG96MAR02A08M1G,...

Quectel BC95-CNV 安全漏洞

The Quectel BC95-CNV is a high-performance, low-power, multi-band LTE Cat NB2 wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in Quectel BC95-CNV version V100R001C00SPC051, which originated from a vulnerability that allows an attacker to...

CVE-2024-54984

An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message. NOTE: this is disputed by the supplier...