14 matches found
CVE-2026-38708
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary...
CVE-2026-38710
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input...
CVE-2026-38710
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input...
EUVD-2026-51647
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary...
PT-2026-66854
Name of the Vulnerable Software and Affected Versions TR1200 version 2.4.15 TR3000 version 2.4.21 WR300 version 2.4.25 WR1200 version 2.4.23 WR1300 version 2.4.22 WR1500 version 2.3.10 WR3000 version 2.4.19 WR3600 version 2.3.16 WR6500 version 2.3.15 Description A command injection issue exists i...
CVE-2026-38708
CVE-2026-38708 affects multiple TR/WR device variants (TR1200 v2.4.15; TR3000 v2.4.21; WR300 v2.4.25; WR1200 v2.4.23; WR1300 v2.4.22; WR1500 v2.3.10; WR3000 v2.4.19; WR3600 v2.3.16; WR6500 v2.3.15). The vulnerability is a command injection in the system.setclock interface that allows an attacker ...
EUVD-2026-51646
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input...
CVE-2026-38710
CVE-2026-38710 affects TR1200 v2.4.15 and TR3000 v2.4.21. The issue is a command injection in the system.setclock interface that allows an attacker to execute arbitrary commands as root via crafted input. Impact is described as root-level command execution; no exploitation details or mitigations ...
CVE-2026-38708
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary...
PT-2026-66855
Name of the Vulnerable Software and Affected Versions TR1200 version 2.4.15 TR3000 version 2.4.21 Description A command injection issue exists in the 'system.setclock' interface. This allows an attacker to execute arbitrary commands with root privileges by providing a specially crafted input...
EUVD-2000-1107
Malware in sbrugna...
IBM AIX setclock buffer overflow in remote timeserver argument
Overview There is a buffer overflow in the IBM AIX setclock command that may allow local attackers to gain root privileges. Description The setclock command sets the system's clock from a remote time server. This command contains a buffer overflow in the handling of the remote timeserver hostname...
CVE-2000-1122
IBM AIX setclock is vulnerable to a local buffer overflow in handling the remote timeserver hostname, potentially allowing a local user to gain root privileges. Affected versions include AIX 4.3.x and earlier. IBM provided patches via APARs IY07790 (AIX 4.2) and IY07831 (AIX 4.3). CERT/CC notes t...