Lucene search
+L

32 matches found

Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.4 views

PT-2024-7031 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version DIR 878 FW130B08 D-Link DIR-882 version DIR 882 FW130B06 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command in the SetVLANSettings function of the...

8CVSS8AI score0.0209EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2023/08/30 5:15 p.m.3 views

CVE-2023-40839

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADF3C" function to execute commands...

9.8CVSS6.1AI score0.00954EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/30 12:0 a.m.5 views

PT-2023-27665 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue concerns a command execution vulnerability in the sub ADF3C function. This vulnerability is exploited through the formSetIptv function, which obtains the list a...

9.8CVSS9.4AI score0.00954EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/03/18 9:15 p.m.2 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS7.5AI score0.04636EPSS
Exploits1References2
OSV
OSV
added 2022/03/18 9:15 p.m.3 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

9.8CVSS6AI score0.04636EPSS
Exploits1References1
NVD
NVD
added 2022/03/18 9:15 p.m.30 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS0.04636EPSS
Exploits1References1
Prion
Prion
added 2022/03/18 9:15 p.m.25 views

Command injection

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS9.6AI score0.04636EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/18 8:53 p.m.34 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

9.9AI score0.04636EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/03/18 12:0 a.m.6 views

PT-2022-17296 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A remote command execution issue was discovered, allowing for potential exploitation via the vlanid parameter in the SetIPTVCfg function. This could lead to unauthorized access and control...

10CVSS9.3AI score0.04636EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/18 12:0 a.m.5 views

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the vlanid parameter in the SetIPTVCfg function to properly filter the special elements of the construction snippet, which can be exploited to...

10CVSS6AI score0.04636EPSS
Exploits1References2
NVD
NVD
added 2019/05/07 7:29 p.m.10 views

CVE-2018-20503

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

6.1CVSS6.1AI score0.03904EPSS
Exploits5References3
Cvelist
Cvelist
added 2019/05/07 6:25 p.m.15 views

CVE-2018-20503

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

6.1AI score0.03904EPSS
Exploits5References3
Rows per page
Query Builder