Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:30 p.m.5 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS8AI score0.00617EPSS
Exploits0References1
CNVD
CNVD
added 2020/12/02 12:0 a.m.3 views

ZXELINK ZXV10 W908 SQL Injection Vulnerability

The ZXV10 W908 is a wireless access controller from ZXELINK. A SQL injection vulnerability exists in versions prior to ZXELINK ZXV10 W908 MIPSA1022IPV6R3T6P7Y20. The vulnerability stems from the device failing to properly filter parameters. An attacker can exploit the vulnerability by sending...

9.8CVSS8.2AI score0.00617EPSS
Exploits0References1
NVD
NVD
added 2020/12/01 4:15 p.m.12 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS9.7AI score0.00617EPSS
Exploits0References1
OSV
OSV
added 2020/12/01 4:15 p.m.3 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8CVSS5.9AI score0.00617EPSS
Exploits0References1
Prion
Prion
added 2020/12/01 4:15 p.m.17 views

Sql injection

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

7.5CVSS9.6AI score0.00617EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/01 3:44 p.m.13 views

CVE-2020-6880

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before...

9.8AI score0.00617EPSS
Exploits0References1
CVE
CVE
added 2020/12/01 3:44 p.m.57 views

CVE-2020-6880

The CVE-2020-6880 issue affects ZXELINK ZXV10 W908 wireless controller devices, where an SQL injection flaw stems from improper parameter filtering. A remote attacker can send crafted SQL statements without authentication and escalate to administrative rights. Affected versions are prior to ZXELI...

9.8CVSS9.6AI score0.00617EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2020/12/01 12:0 a.m.4 views

Zxelink Wireless Controller SQL注入漏洞

The ZXV10 W908 is a wireless access controller from ZXELINK. A SQL injection vulnerability exists in versions prior to ZXELINK ZXV10 W908 MIPSA1022IPV6R3T6P7Y20. The vulnerability stems from the device failing to properly filter parameters. An attacker can exploit the vulnerability by sending...

9.8CVSS7.4AI score0.00617EPSS
Exploits0References2
Rows per page
Query Builder