TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK A7100RU version V7.4cu.2313B20191024, which stems from the discovery of a command injection vulnerability via the port number of the...

CVE-2022-44843

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...

CVE-2022-44843: Improper Neutralization of Special Elements used in an OS Command

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...

CVE-2022-44844: Improper Neutralization of Special Elements used in an OS Command

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function...

CVE-2022-44844

CVE-2022-44844 describes a command injection in the TOTOLINK A7100RU (version 7.4cu.2313_B20191024) via the pass parameter in the function setting/setOpenVpnCfg . The vulnerability is documented as a remote (network) issue with no required user interaction and no privileges required, causing high...

CVE-2022-29830

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control SettingGX Works3 related software versions from 1.000A to 1.065T allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a...

CVE-2022-29830

CVE-2022-29830 affects Mitsubishi Electric GX Works3 and Motion Control Setting software. The vulnerability arises from the use of a hard-coded cryptographic key, allowing a remote unauthenticated attacker to disclose or tamper with sensitive information and potentially obtain project-file detail...

CVE-2022-29829

CVE-2022-29829 describes a vulnerability in Mitsubishi Electric software where a hard-coded cryptographic key enables remote, unauthenticated disclosure of sensitive information (viewing/viewing or executing programs and project files). Affected products include: GX Works3 versions 1.000A–1.090U,...

CVE-2022-29826

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control SettingGX Works3 related software versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-29826

CVE-2022-29826 involves a Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 (versions 1.000A–1.087R) and Motion Control Setting (GX Works3 related software) (versions 1.000A–1.042U). The root cause is cleartext storage that could allow a remote unauthentica...

PT-2022-19860

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 versions 1.000A through 1.090U GT Designer3 Version1 GOT2000 versions 1.122C through 1.290C Motion Control Setting GX Works3 related software versions 1.035M through 1.042U Description The issue allows a remote...

PT-2022-5974

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z Motion Control SettingGX Works3 related software versions from 1.000A and later Description The issue is related to the use of a hard-coded cryptographic key, allowing a remote...

CVE-2022-29830: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control SettingGX Works3 related software versions from 1.000A to 1.065T allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a...

CVE-2022-29826: Cleartext Storage of Sensitive Information

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control SettingGX Works3 related software versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-29829: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, Motion Control SettingGX Works3 related software versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to...

CLSA-2022-1669238963 xterm: Fix of CVE-2022-45063

CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window - Add NULL pointer checks in xstrcasecmp and xstrncasecmp to help with error recovery for a missing font...

PT-2022-27151 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: The issue concerns a command injection via the FileName parameter in the setUploadSetting function. This allows for potential malicious commands to be executed. No information is...

CVE-2022-44171

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formfastsettingwifiset...

The vulnerability of the SetIPv4FirewallSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetIPv4FirewallSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure of the system to properly validate the input data entered by the user when processing the IPv4FirewallRule element. Exploiting thi...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability, which stems from the formfastsettingwifiset function that allows an attacker to implement a...