223 matches found
CVE-2025-60962
Summary: CVE-2025-60962 describes an OS Command Injection vulnerability in EndRun Technologies’ Sonoma D12 Network Time Server (GPS) firmware version 4.00 (F/W 6010-0071-000). The issue is triggered via OS command injection and could allow a remote attacker to access sensitive information, with a...
EndRun Technologies Sonoma D12 Network Time Server 安全漏洞
EndRun Technologies Sonoma D12 Network Time Server is a time synchronization device from EndRun Technologies, USA. A security vulnerability exists in EndRun Technologies Sonoma D12 Network Time Server version 4.00, which stems from susceptibility to an OS command injection attack that could lead ...
PT-2025-40931
Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to execute arbitrary code. This could lead to a denial of service,...
CVE-2025-60967
Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...
EndRun Technologies Sonoma D12 Network Time Server 安全漏洞
EndRun Technologies Sonoma D12 Network Time Server is a time synchronization device from EndRun Technologies, USA. A security vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 version, which stems from vulnerability to OS command injecti...
EndRun Technologies Sonoma D12 Network Time Server 安全漏洞
EndRun Technologies Sonoma D12 Network Time Server is a time synchronization device from EndRun Technologies, USA. A security vulnerability exists in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00, which stems from susceptibility to cross-site scripting attacks...
EndRun Technologies Sonoma D12 Network Time Server 安全漏洞
EndRun Technologies Sonoma D12 Network Time Server is a time synchronization device from EndRun Technologies, USA. A security vulnerability exists in EndRun Technologies Sonoma D12 Network Time Server version 4.00, which stems from vulnerability to OS command injection attacks that could lead to...
CVE-2025-60964
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...
CVE-2025-60961
Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...
CVE-2025-60956
Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...
CVE-2025-60959
The CVE-2025-60959 entry concerns OS Command Injection in EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware. Affected product/version: Sonoma D12 NTP GPS F/W 6010-0071-000, Ver 4.00. Underlying cause is described as an OS command injection vulnerability, enabling attackers to disc...
CVE-2025-60956
Summary: CVE-2025-60956 affects EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware version 4.00 (GPS) running on server hardware. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that could allow an attacker to cause arbitrary code execution, a denial of service, privi...
PT-2025-40926
Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that may allow attackers to execute arbitrary code, cause a denial of service, gain...
CVE-2025-60961
EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware 4.00 (6010-0071-000) is affected by a Cross-Site Scripting (XSS) vulnerability. Attackers could exfiltrate sensitive information; other impacts are unspecified. The issue is documented across multiple sources (NVD, Red Hat, EU ENIS...
CVE-2025-60962
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...
CVE-2025-60969
CVE-2025-60969 affects EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware version 4.00, specifically on device 6010-0076-000. The vulnerability is a path/directory traversal that could disclose sensitive information. Public sources from Tenable.ot and PT-Security confirm the vulner...
CVE-2025-60957
The CVE-2025-60957 entry concerns EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware 4.00 on hardware/version 6010-0071-000. The vulnerability is an OS Command Injection in the router’s OS, enabling an unauthenticated or remote attacker to potentially execute arbitrary code, cause ...
CVE-2025-60967
EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware 6010-0076-000 Ver 4.00 is affected by a Cross Site Scripting (XSS) vulnerability (CVE-2025-60967). The issue, as described across multiple sources, enables attackers to obtain sensitive information. The CVSSv3.1 vector is CVSS:3.1/...
CVE-2025-60963
CVE-2025-60963 is an OS command injection affecting EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware 4.00, specifically v6010-0071-000. The vulnerability is described as allowing an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and disc...