CVE-2021-42885: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack...

PT-2022-11728 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue concerns a remote command injection vulnerability. This vulnerability is located in the setDeviceName function of the global.so file, allowing control over the deviceName to launch ...

CVE-2021-42888: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack...

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T has a command injection vulnerability, which originates from the NTPSyncWithHost function of the file system containing a remote command injection issue that can be exploited by an attacker to...

CVE-2021-42884: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack...

CVE-2021-42890: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...

CVE-2021-42875

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cstemodules/system.so to control the ipDoamin...

CVE-2021-42875

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cstemodules/system.so to control the ipDoamin...

Command injection

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cstemodules/system.so to control the ipDoamin...

CVE-2021-42875

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cstemodules/system.so to control the ipDoamin...

CVE-2021-42875

TOTOLINK EX1200T firmware version 4.1.2cu.5215 contains a remote command injection vulnerability in the setDiagnosisCfg function of lib/cste_modules/system.so, which can be exploited to control ipDoamin. The issue is reported across multiple sources (NVD, CNVD, Red Hat, CNVD, CNNVD) and is descri...

CVE-2021-42875: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cstemodules/system.so to control the ipDoamin...

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a wireless signal booster. a remote command injection vulnerability exists in the setDiagnosisCfg function in the lib/cstemodules/system.so file in TOTOLINK EX1200T V4.1.2cu.5215. An attacker can exploit this vulnerability to take control of ipDoamin...

PT-2022-11725 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue concerns a remote command injection vulnerability. This vulnerability is located in the setDiagnosisCfg function of the file lib/cste modules/system.so, which can be exploited to...

PT-2022-3451

Name of the Vulnerable Software and Affected Versions SerComm h500s versions prior to the fixed version Description The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands via the...

Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2022-55526)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks. a remote command injection vulnerability exists in Aruba ClearPass Policy Manager, which could be exploited by an authenticated remote attacker to run arbitrary...

Node-Traceroute RCE Vulnerability

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...

GHSA-8J9V-QHP4-WV55 Node-Traceroute RCE Vulnerability

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...

Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2022-55528)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability in Aruba ClearPass Policy Manager versions 6.10.4 and earlier, 6.9.9 and earlier, 6.8.9-HF2 and earlier, 6.7.x and earlier can be exploite...

Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2022-55527)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A remote command injection vulnerability exists in the web management interface of Aruba ClearPass Policy Manager versions 6.10.4 and earlier, 6.9.9 and earlier, a...