CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

Command injection

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

CVE-2022-25441

CVE-2022-25441 affects Tenda AC9 v15.03.2.21, with a remote command execution (RCE) vulnerability via the vlanid parameter in SetIPTVCfg. Root cause cited as failure to properly filter special elements of the construction snippet in vlanid. Impact: high-severity RCE over the network with potentia...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

PT-2022-17256

Name of the Vulnerable Software and Affected Versions DCN Firewall DCME-520 version not specified Description A remote command execution issue was discovered, allowing attackers to execute commands via the host parameter in the /system/tool/ping.php file. Recommendations At the moment, there is n...

CVE-2022-26265: Improper Neutralization of Special Elements used in an OS Command

Contao Managed Edition v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the component phpcli parameter...

CVE-2022-25441: Improper Neutralization of Special Elements used in an OS Command

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

PT-2022-17296 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A remote command execution issue was discovered, allowing for potential exploitation via the vlanid parameter in the SetIPTVCfg function. This could lead to unauthorized access and control...

PT-2022-17292 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A remote command execution issue was found in the SetIPTVCfg function, allowing for potential exploitation. Recommendations: For Tenda AC9 version 15.03.2.21, consider restricting access to the...

CVE-2022-25390: Undefined Security Weakness

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25438: Improper Neutralization of Special Elements used in an OS Command

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

PT-2022-17751 · Contao · Contao Managed Edition

Name of the Vulnerable Software and Affected Versions: Contao Managed Edition version 1.5.0 Description: A remote command execution issue was discovered, allowing for potential exploitation via the php cli parameter. This could lead to unauthorized execution of commands. Recommendations: For Cont...

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software, including CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850,...

NETGEAR Integrated Routing Software Command Injection

The vulnerability of NETGEAR’s integrated routing software, including models such as CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR’s RAX200, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 routers lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TerraMaster webNasIPS Access Information Disclosure

The vulnerability of the webNasIPS module in the TerraMaster operating system for data storage devices called TerraMaster TNAS is related to the possibility of executing arbitrary commands. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...