CVE-2022-33325

Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33325

Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33325

CVE-2022-33325 relates to OS command injection in Robustel R1510 web_server ajax endpoints. Talos details show unsafe usage of user inputs in functions like sysprintf and direct calls to system(), enabling arbitrary command execution via crafted network requests to endpoints such as /ajax/clear_t...

CVE-2022-33314

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33314

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33314

CVE-2022-33314 concerns Robustel R1510 web server command injection vulnerabilities. Talos/Cisco reports describe multiple unsanitized user inputs reaching endpoints under /action/ that allow OS command execution via unsafe formatting and system() usage. Root cause involves unsafe handling in cod...

CVE-2022-33313

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33313

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33313

CVE-2022-33313 affects Robustel R1510 (3.3.0) web_server endpoints. Multiple OS command injection flaws arise from unsafe handling of user-controlled input in several /action/ endpoints (notably /action/import_https_cert_file/, /action/import_cert_file/, and /action/import_sdk_file/). The root ca...

CVE-2022-33312

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33312

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33312

The provided documents confirm multiple OS command injection vulnerabilities in Robustel R1510’s web_server endpoints (notably /action/import_cert_file/, etc.) affecting 3.3.0 and 3.1.16 releases. TALOS details show unsafe use of user-supplied parameters with system()/sysprintf calls, including p...

CVE-2022-32585

A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-32585

A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-32585

Robustel R1510 is affected by CVE-2022-32585 in the clish art2 functionality. TALOS details a pre-auth/administrative-login path where a specially crafted network request can trigger arbitrary command execution, via the art2 feature accessed through the clish console. The 9.1/9.1–9.8 CVSS data in...

CVE-2022-28127

A data removal vulnerability exists in the webserver /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-28127

A data removal vulnerability exists in the webserver /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-28127

The CVE-2022-28127 case concerns Robustel R1510: the web_server /action/remove/ API can trigger arbitrary file deletion via a crafted request. The TALOS analysis explains that the handler builds a shell command using a user-controlled file_name and only checks for path traversal by looking for “....

Robustel R1510 操作系统命令注入漏洞

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...

PT-2022-18827 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 version 3.3.0 Description: A data removal issue exists in the web server /action/remove/ API functionality. This allows an attacker to send specially-crafted network requests, potentially leading to arbitrary file deletion by...