Lucene search
+L

158 matches found

Cvelist
Cvelist
added 2023/04/26 12:0 a.m.37 views

CVE-2023-24796

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

9.9AI score0.01586EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/26 12:0 a.m.6 views

Vinga WR-AC1200 安全漏洞

The Vinga WR-AC1200 is a wireless router from Vinga. A security vulnerability exists in the Vinga WR-AC1200 version 81.102.1.4370 and prior versions. A remote attacker can exploit this vulnerability to execute arbitrary code via the password parameter of the /goform/sysTools and /adm/systools.asp...

9.8CVSS9AI score0.01586EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/26 12:0 a.m.56 views

CVE-2023-24796

CVE-2023-24796 affects the Vinga WR-AC1200 router (versions 81.102.1.4370 and earlier). A vulnerability in the password parameter exposed via the /goform/sysTools and /adm/systools.asp endpoints allows a remote attacker to run arbitrary code. Several connected sources confirm the affected product...

9.8CVSS9.6AI score0.01586EPSS
SaveIn wildExploits0References1Affected Software1
OSV
OSV
added 2023/04/04 1:15 p.m.6 views

CVE-2023-26866

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

9.8CVSS7.4AI score0.02288EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/04 1:15 p.m.32 views

CVE-2023-26866

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

9.8CVSS9.8AI score0.02288EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/04 1:15 p.m.20 views

Command injection

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

7.5CVSS9.7AI score0.02288EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2023/04/04 12:0 a.m.52 views

CVE-2023-26866

CVE-2023-26866 affects GreenPacket OH736 WR-1200 Indoor Unit (M-IDU-1.6.0.3_V1.1) and OT-235 (MH-46360-2.0.3-R5-GP). It enables remote command injection via pre-login execution, with root privileges and potential full system takeover. CVSS v3.1 base score 9.8 (NETWORK, HIGH impact on confidential...

9.8CVSS9.7AI score0.02288EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/04 12:0 a.m.5 views

Green Packet OH736 命令注入漏洞

The Green Packet OH736 is a router from Green Packet USA. A security vulnerability exists in the WR-1200 Indoor Unit, OT-235 M-IDU-1.6.0.3V1.1 version, and MH-46360-2.0.3-R5-GP version of the Green Packet OH736. By exploiting this vulnerability, an attacker can completely take over root privilege...

9.8CVSS8.4AI score0.02288EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/04 12:0 a.m.30 views

CVE-2023-26866

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover...

10AI score0.02288EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2022/05/02 12:0 a.m.129 views

TP-LINK WR-886N Multiple Buffer Overflow Vulnerabilities (CVE-2021-44622; CVE-2021-44623; CVE-2021-44625; CVE-2021-44626; CVE-2021-44627; CVE-2021-44628; CVE-2021-44629; CVE-2021-44630; CVE-2021-44631; CVE-2021-44632)

Multiple buffer overflow vulnerabilities exist in TP-LINK WR-886N. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

10CVSS4.5AI score0.02413EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:0 a.m.10 views

The vulnerability of the /cloud_config/router_post/register function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary code.

The vulnerability of the /cloudconfig/routerpost/register function in TP-LINK’s WR-886N router software arises due to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted request...

10CVSS8.6AI score0.02413EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:0 a.m.8 views

The vulnerability of the /cloud_config/router_post/login function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary code.

The vulnerability of the /cloudconfig/routerpost/login function in TP-LINK’s WR-886N router software arises due to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted request...

10CVSS8.6AI score0.02413EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.8 views

The vulnerability of the /cloud_config/router_post/check_reset_pwd_verify_code function in TP-LINK’s WR-886N router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /cloudconfig/routerpost/checkresetpwdverifycode function in TP-LINK’s WR-886N router software arises due to buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01755EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.7 views

The vulnerability of the /cloud_config/router_post/check_reg_verify_code function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary code.

The vulnerability of the /cloudconfig/routerpost/checkregverifycode function in TP-LINK’s WR-886N router software arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using a specially crafted request...

10CVSS8.5AI score0.02413EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.7 views

The vulnerability of the /cloud_config/router_post/get_reg_verify_code function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary codes.

The vulnerability of the /cloudconfig/routerpost/getregverifycode function in TP-LINK’s WR-886N router software arises due to a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by sending a specially crafted request...

10CVSS8.6AI score0.02413EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.7 views

The vulnerability of the /cloud_config/router_post/get_reset_pwd_veirfy_code function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary code.

The vulnerability of the /cloudconfig/routerpost/getresetpwdveirfycode function in TP-LINK’s WR-886N router software is caused by buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by sending a specially crafted request...

10CVSS8.5AI score0.02413EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.8 views

The vulnerability of the /cloud_config/router_post/modify_account_pwd function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary code.

The vulnerability of the /cloudconfig/routerpost/modifyaccountpwd function in TP-LINK’s WR-886N router software arises due to a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by using a specially crafted request...

10CVSS8.5AI score0.02413EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:44 p.m.3 views

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

10CVSS7.7AI score0.02413EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/10 5:44 p.m.16 views

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

10CVSS0.02413EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:44 p.m.8 views

CVE-2021-44631

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/resetcloudpwd feature, which allows malicous users to execute arbitrary code on the system via a crafted post request...

10CVSS7.7AI score0.02413EPSS
SaveExploits1References2
Rows per page
Query Builder