CVE-2023-43478 Unauthenticated configuration restore and firmware update

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

CVE-2023-43478

The CVE-2023-43478 entry concerns Telstra Smart Modem Gen 2 (Arcadyan LH1000) with firmware versions prior to 0.18.15r. The vulnerability stems from the fake_upload.cgi endpoint, which allows unauthenticated uploads of firmware images and configuration backups, potentially enabling an attacker to...

CVE-2023-43478 Unauthenticated configuration restore and firmware update

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

CVE-2023-43477 Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

The pingfrom parameter of pingtracerte.cgi in the web UI of Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device...

CVE-2023-43477 Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)

The pingfrom parameter of pingtracerte.cgi in the web UI of Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device...

CVE-2023-43477

CVE-2023-43477 affects Telstra Smart Modem Gen 2 (Arcadyan LH1000). The flaw is in the web UI component ping_tracerte.cgi: the ping_from parameter is not properly sanitized before being used in a system call, enabling a authenticated user to perform a command injection as root on firmware versions

Telstra Smart Modem Command Injection Vulnerability

Telstra Smart Modem is a smart modem from Telstra. A security vulnerability exists in Telstra Smart Modem Gen 2 firmware prior to version 0.18.15r, which originates from a vulnerability that allows an authenticated attacker to achieve command injection as root via the pingfrom parameter...

Telstra Smart Modem Code Issue Vulnerability

Telstra Smart Modem is a smart modem from Telstra. A security vulnerability exists in Telstra Smart Modem Gen 2 firmware prior to version 0.18.15r, which originates from a vulnerability that could allow an authenticated attacker to alter the firmware or configuration on the device and execute cod...

PT-2023-28838 · Telstra · Telstra Smart Modem Gen 2

Name of the Vulnerable Software and Affected Versions: Telstra Smart Modem Gen 2 Arcadyan LH1000 versions prior to 0.18.15r Description: The issue allows unauthenticated attackers to upload firmware images and configuration backups, potentially leading to code execution as root. This could enable...

Malicious code in telstra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc434391e8a24ccffece3e3a2e77f468c9e729527d55dac536709cb959296dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-849 Malicious code in telstra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc434391e8a24ccffece3e3a2e77f468c9e729527d55dac536709cb959296dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information

Australia's largest telecommunications company Telstra disclosed that it was the victim of a data breach through a third-party, nearly two weeks after Optus reported a breach of its own. "There has been no breach of Telstra's systems," Narelle Devine, the company's chief information security...

Avaddon hackers steal SIM card data from Telstra service provider

By Waqas Hackread.com can confirm that hackers from the Avaddon ransomware gang are claiming to have gained access to “tens of thousands” of SIM cards. This is a post from HackRead.com Read the original post: Avaddon hackers steal SIM card data from Telstra service provider...

service.telstra.com.au XSS vulnerability

Open Bug Bounty ID: OBB-579775 Description| Value ---|--- Affected Website:| service.telstra.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

say.telstra.com.au XSS vulnerability

Open Bug Bounty ID: OBB-579774 Description| Value ---|--- Affected Website:| say.telstra.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

signon.telstra.com.au XSS vulnerability

Vulnerable URL: https://signon.telstra.com.au/login?username=xss";;prompt/OPENBUGBOUNTY/...

Telstra 4Gx Portable Router Persistent Root Shell Vulnerability

Exploit for hardware platform in category web applications Majority of this info was found from the 4dpa.ru forum but works well on Telstra Mobile routers. Telstra has been contacted and do not see it as a security issue so have fun messing with your 4g routers, not much of a security issue but i...

id.telstra.com.au XSS vulnerability

Vulnerable URL: https://id.telstra.com.au/register/nrlgame?gotoURL=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

signon.telstra.com XSS vulnerability

Vulnerable URL: https://signon.telstra.com/federationManagement?fdp="// Details: Description| Value ---|--- Patched:| Yes, at 01.07.2017 Latest check for patch:| 01.07.2017 22:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

telstra.com.au XSS vulnerability

Vulnerable URL: http://www.telstra.com.au/search/service-error/index.htm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3577 Google Pagerank| 7 VIP website status:| Yes Check telstra.com.au SSL connection:| Grad...