EUVD-2020-17730

Malware in sbrugna...

EUVD-2020-17732

Malware in sbrugna...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

CVE-2020-25035

CVE-2020-25035 affects UCOPIA Wireless Appliance; the vulnerability lies in the chroothole_client executable, where a dollar-sign metacharacter in the argument can lead to root code execution . Related entries (e.g., CVE-2017-11322) describe remote privilege escalation via the same component befo...

PT-2021-11104

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5 Description: The issue allows for arbitrary code execution with admin user privileges through an escape from a restricted command. Recommendations: For UCOPIA Wi-Fi appliances version 6.0.5, update to a...

CVE-2020-25037: Unrestricted Upload of File with Dangerous Type

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

CVE-2020-25035: Undefined Security Weakness

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chrootholeclient's PHP call, a related issue to CVE-2017-11322...

PT-2021-11102

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5 Description: The issue allows for arbitrary code execution with root privileges. This is achieved through the chroothole client using a PHP call. Recommendations: For UCOPIA Wi-Fi appliances version 6.0.5...

PT-2021-11103

Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5 Description: The issue allows authenticated remote attackers to escape the restricted administration shell CLI and access a shell with admin user rights via an unprotected less command. Recommendations: F...

CVE-2020-25036: Improper Neutralization of Special Elements used in an OS Command

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...