The vulnerability of the microprogrammed Wi-Fi router STATION L-02F, related to deficiencies in access control, allows a hacker to gain access to the device with administrator privileges and execute arbitrary commands.

The vulnerability of the microprogrammed Wi-Fi router STATION L-02F is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to the device with administrator privileges and execute arbitrary commands...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

Command injection

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

CVE-2017-13069 concerns a command-injection vulnerability in QNAP Music Station. Affected are Music Station in QTS 4.2.x (version 4.8.6) and QTS 4.3.x (version 5.0.7) and earlier. If exploited, a remote attacker could execute arbitrary commands on the NAS. Documented CVSS metrics indicate a netwo...

CVE-2017-13069: Improper Neutralization of Special Elements used in a Command

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

PT-2017-12908

Name of the Vulnerable Software and Affected Versions Music Station versions 4.8.6 and earlier for QTS 4.2.x Music Station versions 5.0.7 and earlier for QTS 4.3.x Description The issue allows a remote attacker to run arbitrary commands on the NAS if exploited. Recommendations For Music Station...

Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution

Description: The remote code execution is a combination of 4 different vulnerabilities: CVE-2017-11151 allows remote attackers to upload arbitrary files to the specified directories. CVE-2017-11152 allows remote attackers to log in with a fake authentication mechanism. CVE-2017-11153 allows remot...

Huawei P8 Information Disclosure Vulnerability

The Huawei P8 is a smartphone product from the Chinese company Huawei Huawei. The Huawei P8 suffers from an information disclosure vulnerability that arises from the P8 failing to determine its security status when sending specific signaling to a base station. The vulnerability can be exploited t...

SQL Injection Vulnerability in State Micro CMS Station Messages

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in State Micro CMS site messages. The vulnerability is due to the failure of the system to effectively...

Authentication flaw

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

CVE-2017-10845

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

CVE-2017-10845

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

CVE-2017-10846

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

CVE-2017-10846

CVE-2017-10846 affects NTT DOCOMO Wi‑Fi STATION L‑02F Software versions V10b and earlier. The root cause is a failure to restrict access permissions, allowing an unauthenticated remote attacker to access the device’s web interface and obtain stored setting information via unspecified vectors. Pub...

CVE-2017-10845

CVE-2017-10845 corresponds to a backdoor access issue in NTT DOCOMO Wi‑Fi STATION L-02F firmware (V10g and earlier). Multiple connected records confirm an unauthenticated remote attacker can gain administrative privileges and perform unintended operations via a backdoor account. The vulnerability...

CVE-2017-10846: Missing Authorization

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

CVE-2017-10845: Undefined Security Weakness

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

PT-2017-11553

Name of the Vulnerable Software and Affected Versions Wi-Fi STATION L-02F versions V10b and earlier Description The issue allows remote attackers to bypass access restrictions and obtain information on device settings. Recommendations For versions V10b and earlier, update to a version later than...