Lucene search
+L

7 matches found

CNVD
CNVD
•added 2025/08/10 12:00 a.m.•16 views

Alpine iLX-507 UPDM_wstpCBCUpdStart Function OS Command Injection Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 UPDMwstpCBCUpdStart function suffers from an operating system command injection vulnerability that stems from the failure of the UPDMwstpCBCUpdStart function to correctly filter constructed command special characters,...

6.6CVSS8.1AI score0.00726EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/08/08 12:00 a.m.•27 views

The vulnerability of the UPDM_wstpCBCUpdStart() function of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code in the context of the root user.

The vulnerability of the UPDMwstpCBCUpdStart function of the Alpine iLX-507 audio system exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability can allow a hacker to execute arbitrary code under the root user’s context...

6.8CVSS7AI score0.00726EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/01 6:15 p.m.•17 views

CVE-2025-8473

Alpine iLX-507 UPDMwstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.6CVSS0.00726EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/01 6:15 p.m.•10 views

CVE-2025-8473

Alpine iLX-507 UPDMwstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.6CVSS6.2AI score0.00726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/08/01 12:00 a.m.•19 views

(0Day) (Pwn2Own) Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPDMwstpCBCUpdStart function. The issue results from the lack of...

6.4CVSS6.6AI score0.00726EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•14 views

Alpine iLX-507 操作系统命令注入漏洞

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 UPDMwstpCBCUpdStart function suffers from an operating system command injection vulnerability that stems from the failure of the UPDMwstpCBCUpdStart function to correctly filter constructed command special characters,...

6.6CVSS6.9AI score0.00726EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•1 views

CVE-2025-8473: Improper Neutralization of Special Elements used in an OS Command

Alpine iLX-507 UPDMwstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.6CVSS6.6AI score0.00726EPSS
SaveExploits0References1
Rows per page
Query Builder