CVE-2020-25037

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

CVE-2020-25037

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

Command injection

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

CVE-2020-25035

CVE-2020-25035 affects UCOPIA Wireless Appliance; the vulnerability lies in the chroothole_client executable, where a dollar-sign metacharacter in the argument can lead to root code execution . Related entries (e.g., CVE-2017-11322) describe remote privilege escalation via the same component befo...

CVE-2020-25035

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chrootholeclient's PHP call, a related issue to CVE-2017-11322...

CVE-2020-25036

CVE-2020-25036 affects UCOPIA Wi‑Fi appliances 6.0.5. An authenticated attacker can escape the restricted administration shell (CLI) and obtain a shell with admin rights via an unprotected less command. The available documents do not specify a patch/version to remediate or details about in‑the‑wi...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

CVE-2020-25037

CVE-2020-25037 affects UCOPIA Wi‑Fi appliances 6.0.5, where an escape from a restricted command allows arbitrary code execution with admin privileges. The underlying cause is a command‑injection style path enabling elevation to admin level. Exploitation status is not detailed in the provided docu...

CVE-2020-25037

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

CVE-2020-25036: Improper Neutralization of Special Elements used in an OS Command

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

Ucopia Express License Issues Vulnerability

Ucopia Express is a device used to manage Wifi used by the French company Ucopia. A security vulnerability exists in Ucopia Express 6.0.5 that allows the use of chroothole client PHP calls to execute arbitrary code with root privileges...

UCOPIA Wi-Fi appliances OS Command Injection Vulnerability

A security vulnerability exists in Ucopia Express 6.0.5 that allows an authenticated, remote attacker to escape the restricted administrative shell CLI and access a shell with admin user privileges via unprotected less commands...

UCOPIA Wi-Fi appliances code issue vulnerability

Ucopia Express is a device used to manage Wifi used by the French company Ucopia. A security vulnerability exists in Ucopia Express 6.0.5 that allows execution of arbitrary code with admin user privileges to exit restricted commands via escape...

CVE-2020-25035: Undefined Security Weakness

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chrootholeclient's PHP call, a related issue to CVE-2017-11322...

CVE-2020-25037: Unrestricted Upload of File with Dangerous Type

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

PT-2021-11104

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5 Description: The issue allows for arbitrary code execution with admin user privileges through an escape from a restricted command. Recommendations: For UCOPIA Wi-Fi appliances version 6.0.5, update to a...

PT-2021-11103

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5 Description: The issue allows authenticated remote attackers to escape the restricted administration shell CLI and access a shell with admin user rights via an unprotected less command. Recommendations: F...

PT-2021-11102

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5 Description: The issue allows for arbitrary code execution with root privileges. This is achieved through the chroothole client using a PHP call. Recommendations: For UCOPIA Wi-Fi appliances version 6.0.5...

Input validation

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in...

CVE-2018-15481

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in...