CVE-2023-0611

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The...

CVE-2023-0611

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The...

Command injection

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The...

CVE-2023-0611 TRENDnet TEW-652BRP Web Management Interface get_set.ccp command injection

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The...

CVE-2023-0611 TRENDnet TEW-652BRP Web Management Interface get_set.ccp command injection

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The...

TRENDnet TEW-652BRP 命令注入漏洞

The TRENDnet TEW-652BRP is a wireless router from Trendnet, Inc. The TRENDnet TEW-652BRP suffers from a command injection vulnerability that stems from certain unknown processing in the Web Management Interface's file getset.ccp, which results in command injection...

PT-2023-7915 · Trendnet · Trendnet Tew-652Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-652BRP version 3.04B01 Description: A critical issue has been found in the Web Management Interface of the TRENDnet TEW-652BRP, specifically in the file get set.ccp. This issue leads to command injection, allowing a remote attack...

CVE-2023-20019

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server, and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user ...

CVE-2023-20007

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart unexpectedly,...

Sql injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This...

CVE-2023-20058

Cisco Unified Intelligence Center is affected by a reflected XSS in its web-based management interface. The issue arises from inadequate input validation, allowing an unauthenticated, remote attacker to lure a user into clicking a crafted link, which could execute arbitrary script code in the int...

CVE-2023-20019

CVE-2023-20019 describes a cross-site scripting (XSS) vulnerability in the web-based management interfaces of Cisco BroadWorks Application Delivery Platform, Application Server, and Xtended Services Platform. The issue arises from improper validation of user-supplied input, which could let an una...

Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploi...

PT-2023-1057 · Cisco · Cisco Small Business Rv082 +4

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV042 Series Routers affected versions not specified Cisco Small Business RV016, RV042, RV042G, and RV082 affected versions not specified Description: A vulnerability in the web-based management interface could allow an...

PT-2023-1276 · Cisco · Cisco Small Business Rv340W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute...

PT-2023-1105 · Cisco · Cisco Ip Phone 8800 Series +1

Name of the Vulnerable Software and Affected Versions: Cisco IP Phone 7800 and 8800 Series Phones affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This...

CVE-2022-45093

Siemens SINEC INS exposes CVE-2022-45093 affecting all versions prior to V1.0 SP2 Update 1. An authenticated remote attacker who can reach both the Web Based Management interface (443/tcp) and the SFTP service (22/tcp) could read and write arbitrary files on the device file system, potentially le...

CVE-2022-45093

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 1. An authenticated remote attacker with access to the Web Based Management 443/tcp of the affected product as well as with access to the SFTP server of the affected product 22/tcp, could potentially read and write...

PT-2023-2563 · Zyxel · Zyxel Nbg-418N

Name of the Vulnerable Software and Affected Versions: Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 Description: A cross-site scripting XSS issue is present in the web management interface, related to insufficient protection of the web page structure when handling parameters. This...

PT-2023-14602 · Siemens · Sinec Ins

Name of the Vulnerable Software and Affected Versions: SINEC INS versions prior to V1.0 SP2 Update 1 Description: A vulnerability has been identified that allows an authenticated remote attacker with access to the Web Based Management 443/tcp to potentially inject commands into the dhcpd...