355 matches found
CVE-2025-58116
Summary : CVE-2025-58116 affects I-O DATA WN-7D36QR and WN-7D36QR/UE routers. The issue is an OS command injection caused by improper neutralization of special elements in commands. Impact : remote authenticated attacker could execute arbitrary OS commands. Affected software : WN-7D36QR family (w...
CVE-2025-55075
Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker...
CVE-2025-58116: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...
PT-2025-38106
Name of the Vulnerable Software and Affected Versions: WN-7D36QR WN-7D36QR/UE Description: A hidden functionality issue exists that may allow a remote authenticated attacker to enable SSH access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2025-52288
Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...
CVE-2025-52288
Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...
CVE-2025-52288
The Open5GS 5G Core implementation (versions thru 2.7.5 ) is vulnerable to an assertion failure in the ngap_build_downlink_nas_transport function located within the src/amf/ngap-build.c file of the Access and Mobility Management Function (AMF) component. This flaw allows an attacker to cause a de...
CVE-2025-52288: Uncontrolled Resource Consumption
Assertion failure in function ngapbuilddownlinknastransport in file src/amf/ngap-build.c, the Access and Mobility Management Function AMF component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message...
Malicious code in @zalastax/nolb-react-ue (npm)
The package @zalastax/nolb-react-ue was found to contain malicious code...
Malicious code in ue-youxi-kaifa-xiangmu (npm)
The package ue-youxi-kaifa-xiangmu was found to contain malicious code...
MAL-2025-37504 Malicious code in ue-youxi-kaifa-xiangmu (npm)
The package ue-youxi-kaifa-xiangmu was found to contain malicious code...
Malicious code in epic-ue-saleforce-form (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5403 Malicious code in epic-ue-saleforce-form (npm)
The package communicates with a domain associated with malicious activity...
CVE-2023-33057
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2023-37018
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Capability Info Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37030
A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Initial UE Message packet missing an expected eNBUES1APID field...
CVE-2020-11144
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...
RAN Tester UE: an Automated Declarative UE Centric Security Testing Platform
Cellular networks require strict security procedures and measures across various network components, from core to radio access network RAN and end-user devices. As networks become increasingly complex and interconnected, as in O-RAN deployments, they are exposed to a numerous security threats...
CVE-2024-24455
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...