Command injection

Contao Managed Edition v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the component phpcli parameter...

CVE-2022-26265

Contao Managed Edition v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the component phpcli parameter...

CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

Command injection

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

Command injection

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

CVE-2022-25441

CVE-2022-25441 affects Tenda AC9 v15.03.2.21, with a remote command execution (RCE) vulnerability via the vlanid parameter in SetIPTVCfg. Root cause cited as failure to properly filter special elements of the construction snippet in vlanid. Impact: high-severity RCE over the network with potentia...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

PT-2022-17751 · Contao · Contao Managed Edition

Name of the Vulnerable Software and Affected Versions: Contao Managed Edition version 1.5.0 Description: A remote command execution issue was discovered, allowing for potential exploitation via the php cli parameter. This could lead to unauthorized execution of commands. Recommendations: For Cont...

PT-2022-17292 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A remote command execution issue was found in the SetIPTVCfg function, allowing for potential exploitation. Recommendations: For Tenda AC9 version 15.03.2.21, consider restricting access to the...

PT-2022-17296 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A remote command execution issue was discovered, allowing for potential exploitation via the vlanid parameter in the SetIPTVCfg function. This could lead to unauthorized access and control...

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

The vulnerability of the embedded software of NETGEAR routers such as CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, and XR1000 lies in the absence of measures for cleaning input data. This allows a hacker to execute arbitrary commands.

The vulnerability of NETGEAR’s integrated routing software, including CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850,...

The vulnerability of NETGEAR’s integrated routing software for models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in the lack of measures to sanitize input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR’s integrated routing software, including models such as CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the built-in software of NETGEAR routers such as RAX200, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in the lack of measures to sanitize input data. This allows a malicious actor to execute arbitrary commands.

The vulnerability of the embedded software of NETGEAR’s RAX200, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 routers lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...