15 matches found
CVE-2025-29269
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...
EUVD-2025-201252
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...
EUVD-2025-201251
ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...
CVE-2025-29268
ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...
CVE-2025-29269
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...
CVE-2025-29268
ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...
CVE-2025-29269
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...
ALLNET ALL-RUT22GW v3.3.8 安全漏洞
ALLNET ALL-RUT22GW is a wireless router from ALLNET Germany. A security vulnerability exists in ALLNET ALL-RUT22GW v3.3.8, which stems from the inclusion of hard-coded credentials in the libicos.so library...
CVE-2025-29268: Use of Hard-coded Credentials
ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...
CVE-2025-29269: Improper Neutralization of Special Elements used in an OS Command
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...
CVE-2025-29268
The ALLNET ALL-RUT22GW wireless router (version 3.3.8 ) is vulnerable to the use of hardcoded credentials . These credentials are stored within the libicos.so library, which could potentially be exposed to attackers. Remediation requires updating the device to a newer version that no longer conta...
PT-2025-49121
Name of the Vulnerable Software and Affected Versions ALLNET ALL-RUT22GW version 3.3.8 Description The ALLNET ALL-RUT22GW software contains an OS command injection issue. This occurs through the command parameter within the ''popen.cgi'' endpoint, allowing for potential unauthorized system access...
PT-2025-49120
Name of the Vulnerable Software and Affected Versions ALLNET ALL-RUT22GW version 3.3.8 Description The ALLNET ALL-RUT22GW device version 3.3.8 stores hardcoded credentials within the libicos.so library. These credentials are present in the library and could potentially be exposed. Recommendations...
CVE-2025-29269
The ALLNET ALL-RUT22GW wireless router (version v3.3.8 ) is susceptible to an OS command injection vulnerability. The root cause is the incorrect operation of the command parameter within the popen.cgi endpoint, which could allow an attacker to gain unauthorized system access. As a temporary work...
