CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote code execution vulnerability in the sub_41590C function. The issue enables an attacker to execute arbitrary commands remotely (RCE). Impact is reported as high/critical across confidentiality, integrity, and availability. The vulnerab...

PT-2023-30019 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description: A remote command execution issue was discovered, allowing for potential exploitation via the sub 41590C function. This could enable unauthorized access and control. Recommendations: F...

CVE-2023-46420: Improper Neutralization of Special Elements used in a Command

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...

CVE-2023-46424: Improper Neutralization of Special Elements used in a Command

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub422BD4 function...

CVE-2023-46414

Summary (CVE-2023-46414) TOTOLINK X6000R firmware 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability that is triggered through the sub_41D494 function. The vulnerability’s root cause and impact are described across multiple sources; the CVSS metrics indicate a cri...

PT-2023-30014 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description: A remote command execution issue was discovered, allowing for potential exploitation via the sub 41A414 function. Recommendations: For TOTOLINK X6000R version 9.4.0cu.652 B20230116,...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

TOTOLINK X6000R Command Injection Vulnerability

The TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R v9.4.0cu.652B20230116 version that stems from a remote command execution vulnerability in the method in the sub41590C location...

CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415498 function...

TOTOLINK X6000R Command Injection Vulnerability

The TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R v9.4.0cu.652B20230116 version that stems from a remote command execution vulnerability in the method in the sub422BD4 location...

PT-2023-28853 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A...

CVE-2023-33839

IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036...

CVE-2023-33839

CVE-2023-33839 affects IBM Security Verify Governance 10.0. An authenticated remote attacker could execute arbitrary commands on the system by sending a specially crafted request. Multiple connected sources (Red Hat, CNVD, PT-Security, CVE listings) corroborate command-injection-like behavior tie...

PT-2023-8373 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue is related to insufficient checking of arguments passed to a command, allowing a remote authenticated attacker to execute arbitrary commands on the system by sending a special...

PT-2023-9141 · Owlet · Owlet Cam

Name of the Vulnerable Software and Affected Versions: Owlet Cam versions v1 and v2 Description: A command injection vulnerability exists in the IOCTL that manages OTA updates, allowing a specially crafted command to lead to command execution as the root user. An attacker can make authenticated...

Honeywell PM43 Printer Web Page Module Arbitrary Command Execution

The vulnerability of the printer web page module ARM of Honeywell PM43 is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

httpd next_page function Industrial Wi-Fi Router Yifan YF325 Command Execution

The vulnerability of the httpd nextpage function in the microprogramming-based industrial Wi-Fi routers Yifan YF325 relates to reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

nvram.cgi Component Arbitrary Command Execution

The vulnerability of the nvram.cgi component of Yifan YF325 industrial Wi-Fi routers is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Weintek cMT3000 HMI Web CGI Panel Command Injection

The vulnerability of Weintek cMT3000 HMI Web CGI operator panels exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands remotely...

industrial Wi-Fi routers Yifan YF325 Arbitrary Command Execution

The vulnerability of the diagpingstart function in the validate.so library of Yifan YF325 industrial Wi-Fi routers relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...